Senior IAM Security Specialist, Leadership Experience

Bank of America

. Establish IAM control requirements, governance measures, and escalation paths with risk and control organizations .

Posted 10/6/2026full-timeUnited StatesSenior💰 $140,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Identity and Access Management (IAM) transformation, governance, and control programs, with a strong focus on regulatory compliance and risk management. Proficient in implementing advanced authentication and authorization standards, including zero trust and token-based controls, while effectively communicating with senior leadership.

Highest-signal resume keywords

Identity And Access ManagementOAuth 2.0OpenID ConnectNIST StandardsCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Risk ManagementToken-Based AuthenticationPolicy TranslationIdentity AnalyticsCloud SecurityAPI SecurityRBACABACPythonSQL

Soft Skills

Executive CommunicationAnalytical Decision-MakingCross-Functional AlignmentInfluencing Senior LeadersJudgment

Tools & Technologies

Active DirectoryMicrosoft Entra IDSplunkTableauPower BIPower AutomateAI-Enabled Security SolutionsWorkflow Optimization

Certifications & Qualifications

CISSPCCSPCRISCCISM

Industry Keywords

Financial ServicesBankingRegulatory ComplianceIdentity GovernanceCloud Environments

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSplunkSQLTableau

About the role

Key responsibilities & impact

Establish IAM control requirements, governance measures, and escalation paths with risk and control organizations
Translate internal policy, regulatory, and audit requirements into sustainable controls across enterprise platforms and processes
Drive remediation of identity risks and control gaps across business and technology organizations
Provide executive-level reporting and recommendations on identity risk, control health, adoption, exceptions, and remediation progress
Support audit readiness and sustainable issue closure through accountability, evidence, metrics, and ongoing control monitoring
Build partnerships across GIS, Core Technology, Application Development, Risk, Compliance, Audit, and Third-Party Management
Advise and influence senior leaders on complex identity, technology, security, and risk matters
Drive cross-functional alignment, ownership, and adoption across teams
Define enterprise requirements, strategic direction, and standards for authentication, authorization, and identity governance
Establish governance for human, non-human, workload, service, and AI-agent identities
Set standards for API authentication and authorization, service-to-service access, token-based controls, and secure identity patterns
Drive adoption of zero trust, least privilege, phishing-resistant and passwordless authentication, continuous access evaluation, and context-aware authorization
Advance policy-as-code, automated control enforcement, and identity threat detection
Embed IAM requirements into application, platform, API, cloud, and AI solution design and development lifecycles
Influence investment priorities and modernization roadmaps to reduce standing privilege, unmanaged identities, inconsistent access patterns, and control gaps
Define measures of adoption, control health, identity risk, and remediation progress

Requirements

What you’ll need

10+ years of experience in identity and access management, cybersecurity, cloud security, or access management within large, complex organizations
Leadership experience required
Demonstrated success setting direction for or influencing enterprise-scale IAM transformation, modernization, governance, or control programs
Deep knowledge of OAuth 2.0, OpenID Connect, SAML, service-to-service access, and token-based authentication
Experience governing identity and access across cloud, SaaS, API, application, and hybrid environments
Strong understanding of human and non-human identity risk, including workload, service, machine, and AI-agent identities, delegated authority, and lifecycle accountability
Experience translating policy, regulatory, and audit requirements into practical identity controls within regulated environments
Knowledge of NIST, ISO, FFIEC, SOX, SOC, or equivalent standards and frameworks
Ability to advise, brief, and influence senior leaders on complex technology, security, and risk matters
Exceptional written and verbal communication skills, including executive-level presentations and recommendations
Strong judgment and analytical decision-making skills
Ability to prioritize competing demands, drive cross-functional alignment, and deliver measurable outcomes
Experience in financial services, banking, or another highly regulated industry
Knowledge of RBAC, ABAC, PBAC, segregation of duties, just-in-time access, runtime authorization, and cloud entitlement management
Experience with Active Directory, Microsoft Entra ID, Ping, or equivalent identity platforms
Experience with identity analytics, automation, policy-as-code, AI-enabled security solutions, or workflow optimization
Familiarity with Python, R, SQL, Splunk, Tableau, Power BI, Microsoft Copilot Studio, Power Automate, or equivalent
Experience with cloud security, infrastructure, microsegmentation, monitoring, infrastructure-as-code, or related technologies
Industry certification such as CISSP, CCSP, CRISC, CISM, or equivalent

Benefits

Comp & perks

Annual discretionary incentive plan eligibility
Industry-leading benefits
Paid time off
Resources and support for employees
In-office flexibility based on role-specific responsibilities and business needs
Opportunities to learn, grow, and build a career