empty

IAM Governance Analyst (Data Analytics / Regulatory, Audit, and Process)

Bank of America

Job Description

Posted on: 
November 25, 2024

Summary and company overview

Summary Information about the Role

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Company Overview

Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents. Within GIS, Identity and Access Management (IAM) is a security discipline that enables the right individuals to access the right resources at the right times and in the right context. IAM addresses the mission-critical need to ensure appropriate access to the resources across increasingly heterogeneous technology environments, and to meet increasingly rigorous compliance requirements.

In today’s highly connected world, managing and securing human and machine identities is essential to the safety and success of our workforce. The Identity & Access Management (IAM) team works within Global Information Services (GIS) and in close participation with all other Line of Business teams as well as second and third line of defense partners. Identity and Access Management is the centralized governance function for the enterprise, driving consistency through end-to-end horizontal risk oversight as well as vertical, functional capabilities that provide comprehensive subject matter expertise on all IAM systems and services.

Responsibilities

  • Support the planning, development and delivery to improve IAM compliance through governance activities
  • Work with the Line of Business (LOB) Partners to manage identity lifecycle and access governance activities including developing, maintaining, and facilitating the socialization of IAM policy standards, processes, and procedures.
  • Assist subject matter experts with the coordination and response to regulatory, audit, and compliance requests. This may include the entirety of the issue lifecycle e.g., development of issues, establishing action plans and producing required evidence aligned to action steps, as well as thematic review of the issue portfolio.
  • Support automation of audit/compliance evidence gathering and metrics reporting
  • Collaborate with stakeholders to develop cutting-edge IAM policies and standards that iteratively support IAM enhancements across process, data, and technology.
  • Engage and consult with all IAM capabilities to identify gaps and establish solutions to close gaps.
  • Maintain end-to-end governance processes across the IAM space with aligned controls and metrics to evaluate control effectiveness.
  • Participate in multiple forums with high level executives to communicate compliance expectations, provide strategic direction and oversight, and provide a mechanism for reviewing decisions with downstream impacts.
  • Drive partnership with Operational Risk partners on IAM related Compliance Monitoring and Testing activities.
  • Apply industry best practices, templates, and documentation while also proposing improvements.
  • Clearly articulate the reasons and methods behind proposed changes through informative materials for educating others.
  • Provide education to team members regarding the proposed changes.

Job Requirements

Required Qualifications:

  • Ability to manage data and conduct data analytics, reviewing responses prior to delivery of regulatory, audit, and process responses.
  • Recommended 3-5 years’ experience implementing IAM solutions, controls, and capabilities.
  • Familiarity with NIST 800-53, COBIT, COSO, and/or ISO, and attack frameworks such as MITRE, as well as IAM-specific laws, rules, and regulations within the financial services sector.
  • Experience planning, researching and developing security strategies, standards, and procedures.

Desired Qualifications:

  • Strong technical background and ability to learn new technologies quickly.
  • Ability to identify, analyze and address problems to resolve issues whenever possible in a way that minimizes negative impact and risk to the organization.
  • Ability to work independently on initiatives with little oversight. Motivated and willing to learn.
  • Strong analytical skills / problem solving / conceptual thinking.
  • Ability to be comfortable delivering messages across a wide spectrum of audiences with varying degrees of technical understanding.
  • Strong leadership skills and qualities which enable you to work with peers and various levels of management.
  • Excellent interpersonal and communication skills
  • Ability to question processes for the purpose of improving them.

Additional commentary

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)

Pay and benefits information

Pay range

$76,500.00 - $136,400.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Summary and company overview

Summary Information about the Role

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Company Overview

Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents. Within GIS, Identity and Access Management (IAM) is a security discipline that enables the right individuals to access the right resources at the right times and in the right context. IAM addresses the mission-critical need to ensure appropriate access to the resources across increasingly heterogeneous technology environments, and to meet increasingly rigorous compliance requirements.

In today’s highly connected world, managing and securing human and machine identities is essential to the safety and success of our workforce. The Identity & Access Management (IAM) team works within Global Information Services (GIS) and in close participation with all other Line of Business teams as well as second and third line of defense partners. Identity and Access Management is the centralized governance function for the enterprise, driving consistency through end-to-end horizontal risk oversight as well as vertical, functional capabilities that provide comprehensive subject matter expertise on all IAM systems and services.

Apply now