IAM Security Controls & Compliance Specialist

Bank of America; Denver (CO); On-site; USD 78,000 - 136,000; Full time

Benefits offered by this job

Benefits eligible

Discretionary incentive eligibility

Job summary

Bank of America in Denver, CO seeks an IAM Controls Specialist within Global Information Security to strengthen access governance across End User Access Management and Application Services. You will partner with GIS, GT, CST, GCOR, internal audit, regulators and business teams to design, implement and scale IAM controls that reduce risk and ensure compliance with IAM Standards.

The role requires 5+ years in IAM/IGA, cloud IAM, and hands-on experience with Entra ID, Active Directory, SailPoint,

Qualifications

• 5+ years in Identity Governance & Administration (IGA) or IAM.
• 5+ years implementing and governing IAM cloud solutions.
• Proficiency with AD, Entra ID, SailPoint, Ping Identity.
• Experience with AI-enabled platforms, cloud-native services, and digital transformation.
• Familiarity with Zero Trust, data protection frameworks.

Responsibilities

• Lead QA governance for End User Access Management and Application Services.
• Manage exceptions to the IAM Standard with risk justification and approvals.
• Ensure regulatory, legal and risk requirements are met; escalate concerns.
• Support SDLC initiatives with requirements validation and risk-focused signoff.
• Collaborate across GIS, GT, CST, GCOR, internal audit and regulators for audit responses.

Skills

IGA IAM

IAM cloud solutions

Active Directory

Entra ID

SailPoint

Ping Identity

Data analytics

Zero Trust

Tools

SQL

Tableau

PowerBI

Job description

Bank of America in Denver, CO seeks an IAM Controls Specialist within Global Information Security to strengthen access governance across End User Access Management and Application Services. You will partner with GIS, GT, CST, GCOR, internal audit, regulators and business teams to design, implement and scale IAM controls that reduce risk and ensure compliance with IAM Standards.

The role requires 5+ years in IAM/IGA, cloud IAM, and hands-on experience with Entra ID, Active Directory, SailPoint,