Bank Of America IAM Information Security Senior Controls Specialist 

United States, Colorado, Denver 

664426350

Responsibilities:

• Develops/challenges enterprise-wide information security policies, procedures, and standards related to Service Account Governance with supporting industry leading information security reporting, risk scoring, and governance to ensure adherence to requirements.

• Manages internal and external stakeholder relationships including Line of Business, CIO delegates, Core Technology Infrastructure, Cyber Security Technology, Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and regulatory agencies.

• Analyzes existing Information Technology systems and processes to identify areas of vulnerability, provide mitigation tactics, and design/implement improved systems and processes to ensure Information Technology systems meet enterprise standards, adhere to applicable rules, laws, and regulations, and comply with appropriate treatment of risk.

• Proficient in articulating facts from data-driven plans to partners and stakeholders ensuring adoption of intended solutions to drive risk reductions and adherence that support relevant Identity and Authentication requirements.

• Create a backlog of tactical/strategic Service Account Governance initiatives that will reduce risk and increase adoptability. Through risk ranking, and agreement on priorities, drive initiatives to completion.

• Through recurring engagements, clearly articulate rationale, and methods behind proposed changes through informative materials that can educate from end-user to CIOs.

• Engage senior management to provide factual, transparent, and timely reporting on existing and emerging Service Account risks.

Required Qualifications:

• 10+ years of hands-on IAM experience in a large and complex organization with a deep understanding of IAM concepts, relevant knowledge of IAM business, and strong technical expertise.

• Experience with the following: BeyondTrust, CyberArk, Thycotic, Centrify, Hashicorp, or other Service Account lifecycle management solutions would be an advantage.

• Knowledge and understanding of Identity and Access Management specific laws, rules, regulations, and Guidelines such as SOX, OCC, NIST, ISO/EC, FFIEC within the financial services sector would be an advantage.

• Possession of CISSP certification would be an advantage.

• Knowledge of identity and authentication methodologies, techniques, and technologies.

• Security knowledge which covers core technology infrastructure (Account management, servers, databases, etc.) identity management and application security practice.