Information Security Controls Specialist

Job Description:

Job Title: Info Security Controls Specialist

Corporate Title:  Up to Vice President

Location:  Dublin

Company Overview:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Location Overview:

Overlooking the spectacular Iveagh Gardens with access to all amenities in the beating heart of central Dublin is our Park Place office. Travel options include the LUAS, Dublin Bus networks as well as the Dublin Bikes station, positioned just outside our front doors. As part of our commitment to supporting staff travel to and from work in the most sustainable way possible, we also provide tax saver tickets as part of our award-winning benefits package which means getting to work has never been easier.

Role Description:

In today’s highly connected world, managing and securing human and machine identities is essential to the safety and success of our workforce. The Identity & Access Management (IAM) team works within Global Information Services (GIS) and in close participation with all other Line of Business teams as well as second and third line of defence partners. Identity and Access Management is the centralized governance function for the enterprise, driving consistency through end-to-end horizontal risk oversight as well as vertical, functional capabilities that provide comprehensive subject matter expertise on all IAM systems and services. This role is highly visible and requires frequent interaction with senior management and key stakeholders. In this role, the IAM Governance Analyst will be responsible for identifying IAM policy requirements, monitoring adherence, escalating compliance risks, driving remediation strategies and plans, as well as leading coordination for regulatory activities, audits, compliance self-testing activities, and regulatory exams.

Responsibilities:

• Support the planning, development and delivery of IAM governance processes and technical solutions which elevate security, improve compliance, and automate governance activities for applications, infrastructure, and processes.

• Work with the team to manage identity lifecycle and access governance activities including developing, maintaining, and facilitating the adoption of IAM policy standards, processes, and procedures.

• Assist with the coordination and response to regulatory, audit, and compliance requests

• Aid in the automation of audit/compliance evidence gathering and metrics reporting

• Collaborate with stakeholders to develop IAM policies and standards that iteratively support IAM enhancements across process, data, and technology.

• Engage with Product Managers and Senior Architects to drive the strategic technology roadmap, which dictates the need for modernized security principles.

• Engage and consult with all IAM capabilities to identify gaps and establish solutions to close gaps.

• Maintain end-to-end governance processes across the IAM space with aligned controls and metrics to evaluate control effectiveness.

• Participate in multiple forums with high level executives to communicate compliance expectations, provide strategic direction and oversight, and provide a mechanism for reviewing decisions with downstream impacts.

• Drive partnership with Operational Risk partners on access related Compliance Monitoring and Testing activities.

• Apply industry best practices, templates, and documentation while also proposing improvements.

• Clearly articulate the reasons and methods behind proposed changes through informative materials for educating others.

• Provide education to team members regarding the proposed changes.

What we are looking for:

• You will have an extensive number of years’ experience with managing strategies related to authentication, privileged access management, and IAM enforcement in public clouds are essential for this role.

• Ability to manage data and conduct data analytics, resulting in actionable insights.

• Have a robust understanding of and direct experience delivering IAM-related zero trust capabilities.

• Have experience in deploying and managing Policy-Based Access Control (PBAC).

• Knowledge and understanding of IAM-specific laws, rules, and regulations within the financial services sector.

• Familiarity with NIST 800-53, COBIT, COSO, and/or ISO, and attack frameworks such as MITRE.

• A bachelor’s and/or master’s degree in computer science or information systems security certifications (CISSP, CISM, CGEIT, SSCP, Security+), with relevant work

• Experience planning, researching and developing security strategies, standards, and procedures.

Skills that will help:

• Technical background and ability to learn new technologies quickly

• Ability to identify, analyse and address problems to resolve issues whenever possible in a way that minimizes negative impact and risk to the organization

• Ability to work independently with little oversight. Motivated and willing to learn.

• Analytical skills / problem solving / conceptual thinking

• Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding

• Excellent interpersonal and communication skills

• Ability to question processes for the purpose of improving them

Benefits of working at Bank of America:

Ireland

• At Bank of America, we strive to prioritise employees’ health and wellbeing – it’s what makes us a Great Place to Work.

• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner.

• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons.

• We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum. 

• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work, TaxSaver tickets etc.

• Access to an Employee Assistance Program for confidential support and help for everyday matters.

• Access to free counselling through the Employee Assistance Program and virtual GP services through our private health care plan.

• Ability to donate to charities of your choice and the bank will match your contribution.

• Opportunity to access our Arts & Culture corporate membership program and receive discounted entry to some of Ireland’s most iconic cultural institutions and exhibitions.

• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local community.

Bank of America:

Good conduct and sound judgment is crucial to our long term success. It’s important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.

We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of gender, gender identity or gender reassignment, marital or civil partner status, race, religion or belief, colour, nationality, ethnic or national origins, membership of the Traveller community, age, sexual orientation, pregnancy or maternity, civil status, socio-economic background, family status or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.

We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.