B

Bank of America

Runs a US consumer bank, brokerage and investment bank

Cyber Security Privileged Access Management Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeIn-person

About the Job

Requirements

  • At least 7 years of relevant hands-on privileged access management experience in a complex and heterogeneous technology environment.
  • Deep experience with Linux, Windows, cloud-scale identity and access management, including single sign-on and multi-factor authentication, authorization services, or the design and architecture of privileged access management services.
  • Deep knowledge of bank financial practices and policies, and the ability to adapt to a fast-changing environment.
  • Working-level experience with identity and access management platforms such as Ping Identity, Active Directory, OpenLDAP, and OpenDJ.
  • Experience consuming web service APIs such as JSON and XML.
  • Hands-on experience and involvement in large and complex projects.
  • Expert-level knowledge of privileged access management methodologies and techniques for on-premises and cloud implementation.
  • Expert-level knowledge of authentication platforms such as Active Directory, LDAP, Kerberos, and RADIUS.
  • Deep security knowledge covering core technology infrastructure, including networks, storage, servers, and databases, as well as identity management and application security practices.
  • Deep knowledge of federation platforms or protocols such as OAuth, OpenID, SAML, and WS-Fed.
  • Good knowledge and understanding of privileged access management-specific laws, rules, and regulations within the financial services sector.
  • Proficiency in Microsoft Office products and ability to quickly analyze and synthesize large volumes of data.
  • Familiarity with security standards such as NIST, ISO/IEC, and FFIEC.
  • Understanding and interpreting established information security policies, standards, procedures, and guides, and applying this knowledge to related privileged access management decisions and responses.
  • Knowledge of compliance certifications such as SOX, SOC, and SOC 2.
  • Ability to articulate fact- and data-driven plans and partner with stakeholders to implement solutions that reduce risk and ensure adherence to privileged access management standards.
  • Strong attention to detail and advanced analytical skills.
  • Excellent communication and presentation skills, and ability to effectively prioritize multiple tasks.
  • Proven track record of delivering outcomes that result in sustainable risk reductions in privileged access management.
  • Ability to work independently on initiatives with little oversight.
  • Ability to communicate effectively across individuals with varying degrees of technical and business understanding.

Responsibilities

  • Ensure relevant privileged access controls are adequately enforced across platforms and applications to comply with the identity and access management standard.
  • Partner with privileged access management governance leads to ensure privileged access controls are appropriately measured, reported, and governed.
  • Apply industry privileged access management best practices, templates, and documentation, and propose improvements based on practical knowledge.
  • Document and communicate privileged access management requirements to technology partners to build and implement enhanced, efficient, effective, modern solutions that produce sustainable material risk reduction.
  • Collaborate with stakeholders to develop privileged access management requirements that support long-term modernization and transformation across processes, data, and technology.
  • Educate team members and technology partners about proposed changes to privileged access management controls.
  • Partner with the policy governance team to socialize and publish proposed changes to the privileged access management standard.
  • Take accountability for addressing privileged access management risks; proactively identify risks and opportunities to improve controls; and implement decisive solutions to achieve intended outcomes.
  • Engage senior management to provide factual, transparent, and timely reporting on existing and emerging privileged access management or information security risks.
  • Actively participate in Global Information Security identity and access management and privileged access management forums, including the Monthly IAM Stakeholder Forum and Control Owner Forum, for standard and Single Process Inventory enhancements.
  • Support audit issues through closure and sustainability.
  • Serve as a subject matter expert, advising business and technology counterparts on effective ways to achieve or exceed compliance with applicable policies, standards, procedures, and guides.

Desired Qualifications

  • Possession of a Certified Information Systems Security Professional certification.
  • Knowledge of privileged access management-related tools supporting session proxy, vaulting, just-in-time provisioning, and integration with service management tools.

About the Company

Bank of America

Runs a US consumer bank, brokerage and investment bank

Bank of America runs one of the largest US banks, serving consumers, small businesses, wealthy families, corporations and institutional investors. Alongside checking accounts, credit cards, mortgages and business loans, it owns the Merrill brokerage, a private bank for wealthy clients and a global investment bank that advises on deals and trades stocks and bonds. Customers reach it through thousands of branches and ATMs and its mobile banking app. It earns money mainly from the gap between what it charges on loans and pays on deposits, plus fees from advice, asset management, deal work and trading. It grew from a San Francisco bank founded in 1904 and is headquartered in Charlotte, North Carolina.

Company size
10,001+
Company stage
IPO
Headquarters
Charlotte, NC
Founded
1904

Recently Posted Jobs

Explore more opportunities at Bank of America

See more jobs