Senior Manager - ITS

Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.  Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

 Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.

Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview*

The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank’s Information Security strategy and policy, manages the Information Security program and identifies and addresses vulnerabilities, Develops, deploys and manages a risk-based controls portfolio, Manages and operates global security operations center that monitor, detects and responds to cybersecurity incidents.

GIS Identity & Access management (IAM) Access Control Team goal is to ensure that the control processes and effectiveness are within the identified risk tolerance.  Manage the performance and effectiveness of the working control through the establishment of metrics with thresholds. Validate the reasonability of Laws, Rules and Regulations mapping alignment to the controls, as aligned by the GIS Policy team.

Job Description*

This role is of an experienced manager, who is responsible for leading a team to maximize the value delivered through multiple programs/process and/or value streams within complex processes (Responsibilities section below). Their primary responsibility is to manage people, ensuring they are developing through coaching, mentoring, feedback, and hands-on career development.  Other key responsibilities include aligning strategy and execution by applying Lean and system thinking approaches to strategy, process operations and governance.  This role manages the process, ensures compliance to standards, and drives continuous improvement to operations and governance.

Responsibilities*

• Access Provisioning and De-Provisioning – Leads a team that performs user id administration (additions, modifications, deletions) for operating systems and in-house platforms based on information contained on access administration forms, or pre-defined Role Based Access Control definitions. Should support team with hands on day-to-day BAU work
• Privileged Access Management - Support delivery of Privileged Access Management capabilities associated with UNIX and Linux server systems
• Role Based Access Control - To compile, research, analyze and document data, requirements, workflow/processes, functionality and/or controls for Identity and Access Management team, Role Based Access Control workstream
• Governance & Controls - Enforces security policies by administering and monitoring roles, reviewing violation reports and document controls
• Audit Reports and Inactive users report - Performs inactivity cleanup for users on various applications
• Process building/ Re-Engineering skills - Maintains organization's effectiveness and efficiency by defining, delivering, and supporting strategic plans for implementing information technologies, process improvements & automations
• Risk Management - Review and Monitor the process for risk evaluation and reduction along with audit readiness
• Define responsibilities and supervise the IAM team as per the security operations and controls
• Generate regular reports for management on IAM program status, risks and user activities
• Monitor compliance with financial services policies, regulations, and customer requirements through risk assessments and audits
• Strategic Planning – Align IAM program priorities with the business growth and market trends, ensuring solutions are scalable for future need

Requirements*

Education* 

BE/BTECH/MCA/MSC (IT) equivalent (Any Technical Degree)

Certifications If Any

CIAM / CISM / CISSP

Experience Range*

12+ years of technology/information security experience with minimum 5 years of IAM and 8+ year of leadership experience

Foundational skills*

• Expertise in leading Identity and Access Management (IAM) managed services delivery or operations. Experience in managing security, provisioning of Infrastructure platforms
• Expert in Privileged access Management maintenance and sustainability
• Understanding on IAM policies and controls/SOX controls/Information Security Controls Expertise in global service delivery in information security domain Expertise in information security industry and regulatory standards, policies, procedures, and control systems
• Excellent leadership, stakeholder management and program management skills.
• Effective verbal, presentation, written and interpersonal communication skills. Good negotiation, conflict resolution and decision-making skills
• Working Knowledge of tools like Powerbroker, CyberARK, Secret Vaults, IIQ
• 2+ years advanced scripting skills/Shell scripting (Knowledge on Python is a plus)
• Experience with Role Base Access Controls / SOD / PAM
• Strong understanding of multiple platforms, (RACF, Active Directory, UNIX and AS/400, Vintella)

Desired skills*

• Knowledge of Cyber Security, Risk Management, Agile stc
• Network / Systems Administration, Excellent Communication Skills
• IAM implementation and managed services delivery experience in technology consulting companies with experience in US banking sector

Work Timings: 12:30 to 21:30 (IST)

Job Location: Mumbai