InfoSec Controls Mapping & Governance Lead

Bank of America; Chicago (IL); On-site; USD 78,000 - 136,000; Full time

Benefits offered by this job

Benefits eligible

Paid time off

Job summary

Bank of America is seeking an information security professional to support governance of policy and controls. The role evaluates requirements, identifies coverage gaps, and engages owners to validate evidence.

You will interpret laws and standards, map them to processes, and produce clear, defensible mapping decisions for technical and senior audiences, working with cross-functional teams in an in-office setting.

Qualifications

• 3+ years of experience in information security, cybersecurity risk, technology risk, controls governance, policy governance, compliance, audit, or a related field within a regulated environment.

Responsibilities

• Interpret laws, rules, regulations, policies, and standards; break complex requirements into individual must statements; define the required outcome, scope, accountable parties, and expected evidence.
• Identify and assess candidate processes, controls; develop preliminary coverage recommendations; determine whether coverage is direct, supporting, partial, or insufficient.
• Review technical processes and challenge owner responses to determine whether the documented activity, scope, ownership, dependencies, limitations, and evidence support the proposed mapping.
• Document clear, defensible mapping decisions and determine whether proposed coverage should be accepted, clarified, treated as partial or a gap, or escalated through established governance channels.
• Use data and approved tools to support requirement interpretation, coverage identification, response review, reporting, and process improvement, while independently validating all outputs and maintaining decision accountability.

Skills

Customer Focus

Interpret Laws

Rules & Regulations

Policies & Procedures

Problem Solving

Quality Assurance

Business Acumen

Attention to Detail

Communication

Job description

Bank of America is seeking an information security professional to support governance of policy and controls. The role evaluates requirements, identifies coverage gaps, and engages owners to validate evidence.

You will interpret laws and standards, map them to processes, and produce clear, defensible mapping decisions for technical and senior audiences, working with cross-functional teams in an in-office setting.