Senior Security Specialist, Identity, Authentication, Authorization, Governance (IAM)

Bank of America

. Establish IAM control requirements, governance measures, and escalation paths with risk and control organizations .

Posted 11/6/2026full-timeUnited StatesSenior💰 $140,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Identity and Access Management (IAM), cybersecurity, and cloud security, with a strong focus on governance, risk management, and compliance within regulated environments. Proven ability to influence senior leadership and drive enterprise-scale IAM transformation and modernization initiatives.

Highest-signal resume keywords

10+ Years Experience In Identity And Access ManagementLeadership ExperienceDeep Knowledge Of OAuth 2.0, OpenID Connect, SAMLExperience Governing Identity Across Cloud And Hybrid EnvironmentsIndustry Certification Such As CISSP, CCSP, CRISC, CISM

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity And Access ManagementCybersecurityCloud SecurityToken-Based AuthenticationIdentity Risk ManagementPolicy Translation Into Identity ControlsRBAC, ABAC, PBAC KnowledgeIdentity AnalyticsAutomationPolicy-As-Code

Soft Skills

Exceptional Written And Verbal Communication SkillsAnalytical Decision-Making SkillsAbility To Prioritize Competing DemandsCross-Functional AlignmentInfluencing Senior Leaders

Tools & Technologies

Active DirectoryMicrosoft Entra IDPingPythonRSQLSplunkTableauPower BIMicrosoft Copilot Studio

Certifications & Qualifications

CISSPCCSPCRISCCISM

Industry Keywords

Financial ServicesBankingRegulated EnvironmentsNISTISOFFIECSOXSOCZero TrustContinuous Access Evaluation

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSplunkSQLTableau

About the role

Key responsibilities & impact

Establish IAM control requirements, governance measures, and escalation paths with risk and control organizations
Translate internal policy, regulatory, and audit requirements into sustainable controls across enterprise platforms and processes
Drive remediation of identity risks and control gaps across business and technology organizations
Provide executive-level reporting and recommendations on identity risk, control health, adoption, exceptions, and remediation progress
Support audit readiness and sustainable issue closure through accountability, evidence, metrics, and ongoing control monitoring
Build partnerships across GIS, Core Technology, Application Development, Risk, Compliance, Audit, and Third-Party Management
Advise and influence senior leaders on complex identity, technology, security, and risk matters
Drive cross-functional alignment, ownership, and adoption across teams
Translate technical and risk concepts into executive recommendations, decisions, and measurable outcomes
Define enterprise requirements, strategic direction, and standards for authentication, authorization, and identity governance
Establish governance for human, non-human, workload, service, and AI-agent identities
Set enterprise standards for API authentication and authorization, service-to-service access, token-based controls, and secure identity patterns
Drive adoption of zero trust, least privilege, phishing-resistant and passwordless authentication, continuous access evaluation, and context-aware authorization
Advance policy-as-code, automated control enforcement, and identity threat detection
Embed IAM requirements into application, platform, API, cloud, and AI solution design and development lifecycles
Influence investment priorities and modernization roadmaps
Define measures of adoption, control health, identity risk, and remediation progress

Requirements

What you’ll need

10+ years of experience in identity and access management, cybersecurity, cloud security, or access management within large, complex organizations
Leadership experience required
Demonstrated success setting direction for or influencing enterprise-scale IAM transformation, modernization, governance, or control programs
Deep knowledge of OAuth 2.0, OpenID Connect, SAML, service-to-service access, and token-based authentication
Experience governing identity and access across cloud, SaaS, API, application, and hybrid environments
Strong understanding of human and non-human identity risk, including workload, service, machine, and AI-agent identities, delegated authority, and lifecycle accountability
Experience translating policy, regulatory, and audit requirements into practical identity controls within regulated environments
Knowledge of NIST, ISO, FFIEC, SOX, SOC, or equivalent standards and frameworks
Ability to advise, brief, and influence senior leaders on complex technology, security, and risk matters
Exceptional written and verbal communication skills, including executive-level presentations and recommendations
Strong judgment and analytical decision-making skills
Ability to prioritize competing demands, drive cross-functional alignment, and deliver measurable outcomes
Experience in financial services, banking, or another highly regulated industry
Knowledge of RBAC, ABAC, PBAC, segregation of duties, just-in-time access, runtime authorization, and cloud entitlement management
Experience with identity platforms such as Active Directory, Microsoft Entra ID, Ping, or equivalent technologies
Experience with identity analytics, automation, policy-as-code, AI-enabled security solutions, or workflow optimization
Familiarity with Python, R, SQL, Splunk, Tableau, Power BI, Microsoft Copilot Studio, Power Automate, or equivalent
Experience with cloud security, infrastructure, microsegmentation, monitoring, infrastructure-as-code, or related technologies
Industry certification such as CISSP, CCSP, CRISC, CISM, or equivalent is desired

Benefits

Comp & perks

Annual discretionary incentive plan eligibility
Benefits eligibility
Paid time off
Resources and support for employees
Opportunities to learn, grow, and make an impact
In-office flexibility based on role-specific responsibilities and business needs