Cyber Security Privileged Access Management Analyst
$78.2k - $137.7k/yr+ Annual discretionary award
Senior
Boston, MA, USA+1 moreMore locations: Washington, DC, USA
In Person
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- At least 7 years of relevant hands-on privileged access management experience in a complex and heterogeneous technology environment.
- Deep experience with Linux, Windows, cloud-scale identity and access management, including single sign-on and multi-factor authentication, authorization services, or the design and architecture of privileged access management services.
- Deep knowledge of bank financial practices and policies, and the ability to adapt to a fast-changing environment.
- Working-level experience with identity and access management platforms such as Ping Identity, Active Directory, OpenLDAP, and OpenDJ.
- Experience consuming web service APIs such as JSON and XML.
- Hands-on experience and involvement in large and complex projects.
- Expert-level knowledge of privileged access management methodologies and techniques for on-premises and cloud implementation.
- Expert-level knowledge of authentication platforms such as Active Directory, LDAP, Kerberos, and RADIUS.
- Deep security knowledge covering core technology infrastructure, including networks, storage, servers, and databases, as well as identity management and application security practices.
- Deep knowledge of federation platforms or protocols such as OAuth, OpenID, SAML, and WS-Fed.
- Good knowledge and understanding of privileged access management-specific laws, rules, and regulations within the financial services sector.
- Proficiency in Microsoft Office products and ability to quickly analyze and synthesize large volumes of data.
- Familiarity with security standards such as NIST, ISO/IEC, and FFIEC.
- Understanding and interpreting established information security policies, standards, procedures, and guides, and applying this knowledge to related privileged access management decisions and responses.
- Knowledge of compliance certifications such as SOX, SOC, and SOC 2.
- Ability to articulate fact- and data-driven plans and partner with stakeholders to implement solutions that reduce risk and ensure adherence to privileged access management standards.
- Strong attention to detail and advanced analytical skills.
- Excellent communication and presentation skills, and ability to effectively prioritize multiple tasks.
- Proven track record of delivering outcomes that result in sustainable risk reductions in privileged access management.
- Ability to work independently on initiatives with little oversight.
- Ability to communicate effectively across individuals with varying degrees of technical and business understanding.
Responsibilities
- Ensure relevant privileged access controls are adequately enforced across platforms and applications to comply with the identity and access management standard.
- Partner with privileged access management governance leads to ensure privileged access controls are appropriately measured, reported, and governed.
- Apply industry privileged access management best practices, templates, and documentation, and propose improvements based on practical knowledge.
- Document and communicate privileged access management requirements to technology partners to build and implement enhanced, efficient, effective, modern solutions that produce sustainable material risk reduction.
- Collaborate with stakeholders to develop privileged access management requirements that support long-term modernization and transformation across processes, data, and technology.
- Educate team members and technology partners about proposed changes to privileged access management controls.
- Partner with the policy governance team to socialize and publish proposed changes to the privileged access management standard.
- Take accountability for addressing privileged access management risks; proactively identify risks and opportunities to improve controls; and implement decisive solutions to achieve intended outcomes.
- Engage senior management to provide factual, transparent, and timely reporting on existing and emerging privileged access management or information security risks.
- Actively participate in Global Information Security identity and access management and privileged access management forums, including the Monthly IAM Stakeholder Forum and Control Owner Forum, for standard and Single Process Inventory enhancements.
- Support audit issues through closure and sustainability.
- Serve as a subject matter expert, advising business and technology counterparts on effective ways to achieve or exceed compliance with applicable policies, standards, procedures, and guides.
Desired Qualifications
- Possession of a Certified Information Systems Security Professional certification.
- Knowledge of privileged access management-related tools supporting session proxy, vaulting, just-in-time provisioning, and integration with service management tools.
About the company
Bank of America runs one of the largest US banks, serving consumers, small businesses, wealthy families, corporations and institutional investors. Alongside checking accounts, credit cards, mortgages and business loans, it owns the Merrill brokerage, a private bank for wealthy clients and a global investment bank that advises on deals and trades stocks and bonds. Customers reach it through thousands of branches and ATMs and its mobile banking app. It earns money mainly from the gap between what it charges on loans and pays on deposits, plus fees from advice, asset management, deal work and trading. It grew from a San Francisco bank founded in 1904 and is headquartered in Charlotte, North Carolina.
Company Size
10,001+
Company Stage
IPO
Headquarters
Charlotte, North Carolina
Founded
1904
Get referred to Bank of America
See people who can refer or advise you
Simplify's Take
What believers are saying
- Profits are climbing: net income rose 27% to $9.1 billion in the June 2026 quarter on trading and dealmaking.
- Tech careers have budget behind them: $4 billion of Bank of America's $13 billion yearly tech spend funds new initiatives.
- Cheap funding cushions profits: $530 billion of its $2.03 trillion in deposits paid no interest at June 2026.
What critics are saying
- Falling rates pinch lending profit: lower rates partly offset its 9% rise in interest income in the June 2026 quarter.
- AI is reshaping jobs: over 200,000 employees use AI tools, sending 400,000-plus prompts daily as of July 2026.
- Succession remains open: CEO Brian Moynihan plans to stay through decade's end after a December 2025 executive shake-up.
What makes Bank of America unique
- Small firms bank here: it serves 4 million small businesses and calls itself the top US small business lender.
- Wealth management is a second engine: Merrill, its brokerage, and the Private Bank oversee about $4.9 trillion in client balances.
- Customers use its chatbot at scale: virtual assistant Erica has logged over 3 billion client interactions since 2018.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- Paid Vacation
- Paid Sick Leave
- Flexible Work Hours
- Remote Work Options
- Professional Development Budget
- Conference Attendance Budget