InfoSec Controls Mapping Lead

Bank of America; Addison (TX); On-site; USD 78,000 - 136,000; Full time

Job summary

Bank of America is seeking an information security professional within the Controls Mapping Governance team to interpret security requirements and determine coverage through mapping of processes and controls.

The successful candidate will engage process owners, review evidence, and articulate defensible mapping decisions for technical and senior audiences, ensuring alignment with regulatory and policy expectations.

Qualifications

• 3+ years of experience in information security, cybersecurity risk, technology risk, controls governance, policy governance, compliance, audit, or a related field within a regulated environment.
• Working knowledge of cybersecurity concepts and security domains such as IAM, network, cloud, application security, data protection, vulnerability management, monitoring, incident response, or configuration management.
• Ability to understand how security processes and controls operate across systems, applications, infrastructure, data, users, and technologies without needing to be an engineer in every domain.
• Experience reviewing technical procedures, process flows, control descriptions, system documentation, and evidence artifacts to identify incomplete responses, unsupported conclusions, exclusions, failure conditions, or gaps in coverage.
• Strong analytical and communication skills, including the ability to question technical subject matter experts and document clear mapping decisions for technical and senior audiences.
• Ability to evaluate and independently validate data against requirements, inventories, owner responses, and evidence.

Responsibilities

• Interpret laws, rules, regulations, policies, and standards; break complex requirements into must statements and define outcomes, scope, and evidence.
• Identify and assess candidate processes and controls; develop preliminary coverage recommendations and determine coverage type.
• Review technical processes and challenge owner responses to ensure activity, ownership, dependencies, and evidence support mapping.
• Document clear, defensible mapping decisions and determine whether coverage should be accepted, clarified, partial, gap, or escalated.
• Use data and approved tools to support interpretation, coverage, response review, reporting, and process improvement while validating outputs.

Skills

Customer and Client Focus

Interpret Relevant Laws

Rules

and Regulations

Policies

Procedures

and Guidelines

Problem Solving

Quality Assurance

Business Acumen

Job description

Bank of America is seeking an information security professional within the Controls Mapping Governance team to interpret security requirements and determine coverage through mapping of processes and controls.

The successful candidate will engage process owners, review evidence, and articulate defensible mapping decisions for technical and senior audiences, ensuring alignment with regulatory and policy expectations.