{bc}
workday

Lead Analyst

Bank of America
Mumbai, IND
Full-time
Lead · 8+ years experience
Onsite
Discovered 3 weeks ago
awsazuregcpsharepoint

Full Job Posting

Responsibilities

  • Ensure IAM technology and controls for cloud are implemented, monitored, and adhered to established IAM standards.
  • Achieve intended cloud IAM outcomes through the development and enhancement of applicable standards, processes, data elements, oversight, and governance for the bank’s cloud infrastructure, systems, and applications.
  • Develop cloud IAM requirements based on threat models, laws, rules, and regulations, and drive related updates to Policy, Standards, and Baselines.
  • Assess operational readiness of process and technical capabilities to implement required controls; determine whether existing or proposed controls satisfy policy, regulatory, and control requirements.
  • Appropriately assess risk when business and technology decisions are made, demonstrating a risk management mindset to safeguard the bank’s reputation, clients, and assets by driving compliance with applicable laws, rules, and regulations and adhering to Policy and Standards.
  • Apply industry IAM best practices, templates, and documentation, while proposing improvements based on practical knowledge.
  • Influence technology and platform owners to build and implement necessary IAM controls into cloud environments to create a smooth and effective cloud IAM adoption experience.
  • Engage with Product Managers and Senior Architects to understand the strategic technology roadmap and the resulting need for modernized security principles.
  • Consult with the business to identify gaps and governance issues, leveraging domain expertise to find effective solutions.
  • Provide IAM subject matter expertise within the business and technical domain to support scope and requirement decisions.
  • Perform impact analysis of modifications or enhancements, working closely with development teams to refine requirements into implementable specifications.
  • Ensure solutions meet expectations through comprehensive UAT/QA testing of functionality and quality, and confirm the delivery timeline and adoption plan are fit for purpose.
  • Create required documentation, playbooks, job aides, workflows, and training material as part of deployment and adoption activities.
  • Support the design and update of new and existing controls, including the streamlining and automation of reporting.
  • Develop and maintain documentation that accurately describes the current cloud IAM control environment for review by oversight organizations (Audit, Compliance, Operational Risk, Regulators).

Requirements

  • Education
  • BE/BTECH/MCA/MSC (IT) equivalent (Any Technical Degree)
  • Certifications If Any
  • Experience Range
  • 8+ years of technology/information security experience
  • Foundational skills
  • 8+ years of experience in cyber security or a technology-related field.
  • Deep, applied knowledge of the IAM domain (business and technical) and of cloud IAM threat models and related security controls.
  • Experience designing and deploying cloud IAM technology and related business processes.
  • Experience evaluating threats and risks posed by new cloud technologies and deployment models, and determining best-fit mitigations for advanced cyber threats (attack tactics, techniques, and procedures).
  • Ability to understand the intent of policy, regulations, and control requirements and determine whether existing or proposed operational controls satisfy them.
  • Familiarity with common information security and data protection frameworks and standards (e.g., CIS, NIST, MITRE, ITIL, COBIT, HIPAA, GDPR, PCI DSS, ISO 27001).
  • Excellent written and verbal communication skills with strong attention to detail; able to communicate with business leaders, users, and tech-savvy stakeholders, and to tailor messages across audiences with varying technical understanding.
  • Strong ability to interact, communicate, and influence vertically and laterally, and to collaborate and influence across peer groups and various levels of management.
  • Excellent organizational skills; able to effectively prioritize multiple competing tasks in a dynamic environment.
  • Experience participating in large or complex projects; strong project management skills.
  • Proactive self-starter able to drive direction and work independently on initiatives with minimal oversight.
  • Ability to coordinate and facilitate delivery routines (kick-offs, status reviews, stakeholder meetings, change controls, tollgates).
  • Ability to create management-level reporting using aggregated data.
  • Experience working in Agile methodology with a deep understanding of all phases of the SDLC.
  • Strong analytical, problem-solving, and conceptual-thinking skills.
  • Proficiency in Microsoft Office tools (Excel, PowerPoint, Word, SharePoint), with the ability to analyze data, distill key data points, and present information effectively.
  • A broad knowledge of information security principles and security capabilities
  • Desired skills
  • Hands-on experience with Azure Security Center, AWS Security Hub, or Google Cloud Security.
  • Detailed, bank-specific knowledge across Identity & Access Management, application security, risk assessments, cloud technologies, and GRC (Governance, Risk, and Compliance) with emphasis on security processes and controls.
  • Familiarity with financial industry laws, rules, regulations, and guidance documents.
  • Experience within, or interacting with examiners and partners across, control oversight organizations such as Audit, Compliance, Operational Risk, Regulators, and independent assessment organizations.
  • Experience implementing information security strategy, including compliance with industry best practices and regulatory requirements.
  • Ability to work with both technical and non-technical business owners.
  • Highly organized, motivated self-starter who excels at adapting to changing business needs, anticipating problems, and executing solutions while balancing multiple competing priorities.
  • Work Timings: 12:30 to 21:30 (IST) or 14:30 to 23:30 (IST)
  • Job Location: Mumbai

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Bank of America