
Identity & Access Management (IAM) End User and Application Governance Specialist
Bank of America
full-time
Posted on:
Location Type: Hybrid
Location: Washington • District of Columbia • Massachusetts • United States
Visit company websiteExplore more
Salary
💰 $78,200 - $136,300 per year
About the role
- Analyze, strengthen, and secure the company’s IAM systems and risk posture across End User Access Management and Application Services
- Collaborate across Lines of Business and Technology teams to continuously enhance access control compliance, improve governance programs, and ensure swift and accurate adherence to IAM Standards
- Establish and maintain strong partnerships across GIS, Global Technology (GT), Cyber Security Technology (CST), Third Party Management, Global Compliance & Operational Risk (GCOR), internal audit, and external regulators; provide accurate and timely audit and regulatory responses
- Perform Quality Assurance (QA) activities to validate access control compliance, monitor control health, and support accurate and sustainable metrics reporting
- Monitor and support GT application adherence to IAM controls; manage governance programs, respond to program inquiries, maintain source-of-record updates, execute ARM ticket management, and ensure comprehensive program documentation
- Identify opportunities to de-risk IAM controls by analyzing current capabilities, detecting framework or process gaps, and recommending targeted enhancements aligned with enterprise security strategy
- Maintain high-quality QA documentation, audit artifacts, process workflows, and training materials to support transparency and repeatability
- Lead QA governance activities for End User Access Management and Application Services, ensuring alignment with IAM Standards and enterprise policies
- Manage and maintain exceptions to the IAM Standard, ensuring appropriate risk justification, approvals, and periodic recertification per governance protocols
- Ensure technology systems meet enterprise standards and fully comply with regulatory, legal, and risk requirements, escalating concerns as needed
- Support Software Development Life Cycle (SDLC) initiatives, including requirements validation, control testing, and providing risk-focused signoff for application changes prior to implementation
Requirements
- 5+ years of bank and finance industry hands-on experience in Identity Governance & Administration (IGA) or Identity and Access Management (IAM)
- 5+ years implementing and governing IAM cloud solutions, controls, and capabilities
- High proficiency, experience and working knowledge of Active Directory, Entra ID (Azure AD), SailPoint, Ping Identity, and connector frameworks
- Familiarity with common Information security and data protection frameworks and standards
- Familiarity with Zero Trust architecture, FIDO2, and passwordless authentication concepts
- Proficiency in data analytics and reporting tools (SQL, Tableau, PowerBI) for compliance and risk metrics
- Strong ability to articulate data-driven insights and partner effectively with stakeholders to drive risk reduction and compliance with IAM Standards
- Advanced proficiency and analytical skills, data management and data analysis with strong attention to detail, and background in quality assurance
- Excellent problem-solving, documentation, and communication skills with the ability to work effectively across cross-functional teams
Benefits
- Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors
- Access to paid time off
- Industry-leading benefits including support for physical, emotional, and financial wellness
- Resources and support to make a genuine impact
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
Identity Governance & Administration (IGA)Identity and Access Management (IAM)Active DirectoryEntra ID (Azure AD)SailPointPing Identitydata analyticsSQLTableauPowerBI
Soft Skills
problem-solvingdocumentationcommunicationattention to detailanalytical skillsstakeholder partnershipdata-driven insightscross-functional collaborationrisk reductioncompliance