InfoSec Controls Mapping Lead

Bank of America; Addison (TX); On-site; USD 78,000 - 136,000; Full time

Benefits offered by this job

Benefits eligible

Job summary

Bank of America is seeking an information security professional to join the Controls Mapping Governance team. You will interpret requirements, map controls, and assess evidence to ensure proper coverage across policies, standards, and regulatory expectations.

The role requires discussing technical concepts with subject matter experts, evaluating control ownership, and delivering defensible mapping decisions for senior audiences. In-office culture with role-based flexibility is provided.

Qualifications

• 3+ years of experience in information security, cybersecurity risk, technology risk, controls governance, policy governance, compliance, audit, or a related field within a regulated environment.

Responsibilities

• Interpret laws, rules, regulations, policies, and standards; break complex requirements into individual must statements; define the required outcome, scope, accountable parties, and expected evidence.
• Identify and assess candidate processes, controls; develop preliminary coverage recommendations; determine whether coverage is direct, supporting, partial, or insufficient.
• Review technical processes and challenge owner responses to determine whether the documented activity, scope, ownership, dependencies, limitations, and evidence support the proposed mapping.
• Document clear, defensible mapping decisions and determine whether proposed coverage should be accepted, clarified, treated as partial or a gap, or escalated through governance channels.
• Use data and approved tools to support requirement interpretation, coverage identification, response review, reporting, and process improvement, while independently validating outputs and maintaining decision accountability.

Skills

information security

cybersecurity risk

policy governance

compliance

audit

regulated environment

Tools

SharePoint

Job description

Bank of America is seeking an information security professional to join the Controls Mapping Governance team. You will interpret requirements, map controls, and assess evidence to ensure proper coverage across policies, standards, and regulatory expectations.

The role requires discussing technical concepts with subject matter experts, evaluating control ownership, and delivering defensible mapping decisions for senior audiences. In-office culture with role-based flexibility is provided.