Identity and Access Management (IAM) Governance Senior Specialist (Data Transformation & Modernization exp. required)

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Overview:

Global Information Security (GIS) protects the Bank's information systems, confidential and proprietary data, and customer information. Within GIS, Identity and Access Management (IAM) ensures the right identities have the right access to the right resources at the right time and in the appropriate context, supporting security, risk, regulatory, and operational requirements.

Role Description:

Reporting to the Access Controls & Segregation of Duties Leader, this transformative and visionary IAM role will help define and advance the future state of enterprise access controls, Segregation of Duties (SoD), entitlement governance, role engineering, access intelligence, and IAM modernization. The successful candidate will combine strategic thinking with execution discipline to challenge legacy approaches, establish scalable governance and operating models, and translate IAM strategy into measurable risk reduction and sustainable enterprise capabilities.

The role will lead transformation across current-state assessment, future-state design, roadmap development, standards and governance, implementation, stakeholder adoption, control-effectiveness measurement, and transition to sustainable operating ownership across human and non-human identities. A core expectation is the ability to use analytics, automation, scripting, AI-enabled solutions, workflow optimization, and reporting to improve IAM decisions, controls, user experience, and operational outcomes. Cloud IAM and cloud entitlement-management experience are preferred complementary capabilities but are not required.

Key Responsibilities:

· Lead end-to-end IAM transformation from current-state assessment and future-state design through implementation, adoption, control validation, and sustainable operating ownership.

· Define and advance enterprise access controls, SoD, entitlement governance, role engineering, and access models, translating strategy into executable roadmaps.

· Modernize SoD design, ruleengineering, preventive and detective controls, oversight, remediation, and exception management.

· Advance RBAC, ABAC, PBAC, Just-in-Time (JIT), runtime authorization, and related access-control models to reduce excessive, conflicting, and unnecessary access.

· Establish standards for role engineering, entitlement taxonomy, permission management, access profiling, ownership metadata, and access-model design.

· Define scalable IAM operating models covering decision rights, ownership, exception authority, escalation, service boundaries, and accountability across IAM, Technology, Security, and Lines of Business.

· Advance governance across human and non-human identities, including workforce and privileged identities, service accounts, workload and application identities, APIs, automation identities, and emerging AI-agent identities.

· Define data, metadata, correlation, normalization, reconciliation, ownership, and quality requirements supporting reliable access decisions, SoD analysis, role engineering, certification, analytics, and control measurement.

· Use analytics, automation, scripting, AI-enabled solutions, workflow optimization, and reporting to identify access risk, improve control effectiveness, reduce manual effort, accelerate decision-making, and scale IAM governance.

· Develop dashboards, metrics, analytics, and reporting that provide actionable insight into entitlements, permissions, access patterns, SoD conflicts, exceptions, lifecycle performance, and control effectiveness.

· Identify opportunities to automate repetitive IAM activities and apply AI-assisted analysis to improve governance, quality assurance, remediation workflows, and operational efficiency.

· Define outcome-based measures for risk reduction, role and entitlement quality, exception aging, access-review effectiveness, lifecycle performance, automation adoption, and control sustainability.

· Review and challenge access-control designs, entitlement models, role structures, and transformation proposals for alignment with IAM principles, least privilege, SoD requirements, and sustainable operating practices.

· Drive stakeholder adoption across IAM, Security, Technology, Architecture, Engineering, Product, and Lines of Business, and translate complex IAM risks and transformation outcomes into clear business decisions for senior leadership.

Required Qualifications:

· 10+ years of IAM, Cybersecurity, Access Management, or closely related experience.

· Demonstrated experience leading IAM, access-control, identity-governance, or authorization transformation that materially changed legacy processes, operating models, or technical capabilities.

· Demonstrated ability to define future-state IAM strategy, develop actionable roadmaps, challenge established approaches, and influence enterprise adoption.

· Experience designing, implementing, or governing enterprise access controls, SoD, role-based access, entitlement governance, role engineering, certification, and access lifecycle management, preferably within a large regulated organization.

· Demonstrated hands-on experience using analytics, automation, scripting, AI-enabled solutions, workflow optimization, or reporting to improve IAM outcomes, control effectiveness, risk identification, and operational efficiency.

· Experience building or using IAM dashboards, metrics, data analysis, or reporting to identify trends, support decisions, measure control effectiveness, and drive remediation.

· Ability to translate analytical findings and automation opportunities into scalable IAM processes, controls, and measurable outcomes.

· Experience implementing or governing RBAC, ABAC, PBAC, JIT, runtime, and related access-control frameworks.

· Experience designing or maturing IAM operating models, including ownership, decision rights, exception governance, escalation, accountability, and service boundaries.

· Experience governing human and non-human identities and associated lifecycle, ownership, entitlement, credential, and access-review requirements.

· Experience with identity correlation, entitlement normalization, ownership metadata, reconciliation, and data-quality controls across heterogeneous environments.

· Strong knowledge of IAM architecture, identity attributes and metadata, authentication, federation, least privilege, and access-control principles.

· Strong experience influencing Architecture, Engineering, Security, Product, and Business stakeholders across organizational boundaries.

· Knowledge of relevant security and control frameworks, including NIST, ISO, FFIEC, COBIT, or CSA.

Desired Qualifications:

· Deep knowledge of SoD modernization, toxic or incompatible access combinations, entitlement governance, role engineering, entitlement taxonomy, and access analytics.

· Thought leadership in emerging IAM capabilities, including access intelligence, AI-assisted IAM, non-human identity governance, continuous authorization, or next-generation entitlement governance.

· Advanced experience applying analytics, scripting, automation, AI agents, or workflow technologies to IAM use cases such as entitlement analysis, access reviews, control monitoring, remediation, quality assurance, and self-service.

· Experience with IGA platforms such as SailPoint, Saviynt, Microsoft Entra ID Governance, Okta, or equivalent technologies.

· Experience with privileged access management platforms such as CyberArk or equivalent.

· Cloud IAM, Cloud Security, or Cloud Entitlement Management experience across AWS, Azure, GCP, SaaS, or cloud-native environments.

· Experience with cloud permission models, cloud roles and identities, CIEM, or cloud entitlement analytics.

· Experience with security, automation, analytics, and reporting tools such as Wiz, Terraform, BloodHound, Splunk, Microsoft Copilot Studio, Power Automate, Microsoft 365 Copilot, Tableau, Power BI, Python, SQL, or similar technologies.

· Excellent executive communication and stakeholder engagement skills, with demonstrated ability to influence through expertise, collaboration, credibility, and strategic thinking.

· Relevant IAM, security, cloud, data, automation, or AI certifications such as CISSP, CCSP, CRISC, CISM, AWS Security Specialty, Azure Security Engineer, Azure AI Engineer Associate, AWS AI Practitioner, or equivalent.

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - MA - Boston - 100 Federal St - 100 Federal St Lp (MA5100)

Pay and benefits information

Pay range

$135,000.00 - $182,100.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.