IAM Security Leader: Enterprise Identity & Access Strategy

Bank of America; Boston (MA); On-site; USD 170,000 - 250,000; Full time

Job summary

Bank of America is seeking an experienced IAM Senior Security Specialist within Global Information Security in Boston. The role shapes governance of human, machine, and service identities across the enterprise to support cloud and digital growth.

The ideal candidate will drive policy-to-implementation across risk, compliance, and audit, partner with senior stakeholders, and influence strategic security priorities.

Qualifications

• 10+ years in IAM, cybersecurity, or cloud security in large organizations.
• Leadership experience required.
• Experience transforming enterprise IAM programs, governance, or control programs.
• Knowledge of OAuth 2.0, OpenID Connect, SAML, token-based authentication.
• Experience across cloud, SaaS, API, and hybrid environments.
• Knowledge of standards: NIST, ISO, FFIEC, SOX, SOC.
• Excellent written and verbal communication for exec audiences.

Responsibilities

• Establish IAM governance, requirements, and escalation with risk and control teams.
• Translate policy/audit requirements into practical controls across platforms.
• Remediate identity risk and control gaps; report progress to executives.
• Provide executive-level reporting on identity risk, control health, adoption, and remediation.
• Support audit readiness and issue closure with clear accountability and evidence.
• Collaborate with GIS, Core Technology, and Risk teams to drive alignment.

Skills

IAM leadership

Identity governance

Risk management

Cloud security

OpenID Connect

OAuth 2.0

SAML

Executive communication

Stakeholder management

Zero trust

Education

CISSP

CCSP

CRISC

CISM

Tools

Active Directory

Microsoft Entra ID

Ping Identity

Job description

Bank of America is seeking an experienced IAM Senior Security Specialist within Global Information Security in Boston. The role shapes governance of human, machine, and service identities across the enterprise to support cloud and digital growth.

The ideal candidate will drive policy-to-implementation across risk, compliance, and audit, partner with senior stakeholders, and influence strategic security priorities.