Senior IAM & Security Governance Leader

Bank of America Corporation; Washington (District of Columbia); On-site; USD 130,000 - 180,000; Full time

Job summary

Bank of America Corporation seeks a Senior IAM Security Specialist to lead identity governance and access control initiatives across the enterprise. The role partners with risk, compliance, and technology teams to shape authentication and authorization programs aligned with strategic security priorities.

The ideal candidate has 10+ years in IAM, cloud security, and risk management, with strong executive communication skills and a track record of influencing large-scale transformations.

Qualifications

• 10+ years of experience in identity and access management, cybersecurity, cloud security, or access management within large, complex organizations.
• Leadership experience required.
• Demonstrated success setting direction for or influencing enterprise-scale IAM transformation, modernization, governance, or control programs.
• Deep knowledge of modern authentication standards: OAuth 2.0, OpenID Connect, SAML, and token-based authentication.
• Experience governing identity across cloud, SaaS, API, application, and hybrid environments.
• Strong understanding of human and non-human identity risk, including workload, service, machine, and AI-agent identities, with lifecycle accountability.
• Ability to translate policy, regulatory, and audit requirements into practical identity controls.
• Familiarity with standards such as NIST, ISO, FFIEC, SOX, SOC, or equivalent.
• Demonstrated ability to advise, brief, and influence senior leaders on complex technology, security, and risk matters.
• Excellent written and verbal communication, capable of presenting to executives.

Responsibilities

• Establish IAM control requirements, governance measures, and escalation paths in partnership with risk and control organizations.
• Translate internal policy, regulatory, and audit requirements into practical, sustainable controls across enterprise platforms and processes.
• Drive remediation of identity risks and control gaps across business and technology organizations, escalating risk acceptance decisions as appropriate.
• Provide executive-level reporting and recommendations on identity risk, control health, adoption, exceptions, and remediation progress.
• Support audit readiness and sustainable issue closure through clear accountability, evidence, metrics, and ongoing control monitoring.
• Build trusted partnerships across GIS, Core Technology, Application Development, Risk, Compliance, Audit, and Third-Party Management.
• Advise and influence senior leaders on complex identity, technology, security, and risk matters, including strategic options and trade-offs.
• Drive cross-functional alignment, ownership, and adoption across teams operating at different speeds and maturity levels.
• Translate complex technical and risk concepts into clear executive recommendations, decisions, and measurable outcomes.
• Define measures of adoption, control health, identity risk, and remediation progress, and use results to drive accountable outcomes.

Skills

Identity & Access Management

Cloud Security

Leadership

Risk Management

OAuth/OpenID/SAML

Policy Translation

Executive Communication

Tools

Active Directory

Microsoft Entra ID

Ping Identity

OAuth 2.0 tooling

Job description

Bank of America Corporation seeks a Senior IAM Security Specialist to lead identity governance and access control initiatives across the enterprise. The role partners with risk, compliance, and technology teams to shape authentication and authorization programs aligned with strategic security priorities.

The ideal candidate has 10+ years in IAM, cloud security, and risk management, with strong executive communication skills and a track record of influencing large-scale transformations.