Senior Catalogue Services Security Analyst

at  Bank of America

ROLE DESCRIPTION:

Join our dynamic Global Information Security team in safeguarding Bank of America’s information systems, confidential data, and customer information. As the Senior Catalogue Services Security Analyst, you will play a pivotal role in the modernization and development of the Bank’s identity and access management services, specifically the permissions and services catalogue, with co-development of the overall strategy in partnership with stakeholders, management of the operational business playbooks, monitoring & reporting of controls adherence, and supporting regulatory, audit & compliance queries.
In this role, strong technical and business acumen will be utilized to support secure, risk-based practices for all lines of business within Bank of America ensuring Identity and Access Management, a critical security discipline, enables the right identities to access resources at the right times and in the right context. IAM addresses the mission-critical need for appropriate resource access across diverse technology environments while meeting rigorous compliance requirements. Be part of our inclusive workplace where everyone’s contributions matter!

RESPONSIBILITIES:

• As part of the Identity & Access Governance Enterprise Attribute authority, the Sr. Catalogue Services Security Analyst, as an individual contributor will:
• Oversee identity lifecycle and access governance activities including developing, maintaining, and facilitating the adoption of policy, standards, processes, and procedures.
• Development, evolution and management of policies, standards, processes and playbooks to meet business, security, regulatory, legal and compliance requirements, objectives and goals.
• Build business requirements to drive innovation with internal and public cloud integration of identity and access management practices.
• Evaluate and implement solutions to strengthen access controls through automation, data enrichment and enhanced mechanisms, ensuring company protection.
• Support programs and initiatives to modernize overall practices, processes and related technologies.
• Collaborate across organisations units and management levels, utilising technical and business acumen to support secure practices within broadly defined practices and policies across all businesses.