Senior Information Security Controls Mapping Lead

Bank of America; Denver (CO); On-site; USD 78,000 - 136,000; Full time

Benefits offered by this job

Discretionary incentive eligible

Benefits eligible

Paid time off

Job summary

Bank of America is seeking an information security professional to support governance across policy and controls. The role focuses on interpreting requirements, mapping controls, and validating evidence with stakeholders to ensure alignment with objectives.

Responsibilities include reviewing processes, documenting defensible decisions, and collaborating with control owners, auditors, and policy owners. Strong communication and analytical skills are essential.

Qualifications

• Experience interpreting laws, rules, regulations, policies and standards, turning them into concrete must statements with outcomes.
• Ability to break down complex requirements and identify the required evidence and ownership.
• Strong analytical and communication skills for interface with technical experts and leadership.
• Experience evaluating coverage and mapping decisions with defensible rationale.
• Familiarity with governance, risk and compliance concepts and documents.

Responsibilities

• Interpret laws, rules, regulations, policies, and standards; break complex requirements into must statements; define outcomes and evidence.
• Identify and assess candidate processes and controls; determine coverage type and gaps.
• Review technical processes, challenge owner responses, and verify documentation supports coverage.
• Document mapping decisions clearly; escalate or clarify as needed through governance channels.
• Use data and approved tools to support interpretation, coverage, reporting, and process improvement.

Skills

Customer Focus

Interpret Laws

Rules and Regulations

Policies

Procedures

Guidelines

Problem Solving

Quality Assurance

Business Acumen

Job description

Bank of America is seeking an information security professional to support governance across policy and controls. The role focuses on interpreting requirements, mapping controls, and validating evidence with stakeholders to ensure alignment with objectives.

Responsibilities include reviewing processes, documenting defensible decisions, and collaborating with control owners, auditors, and policy owners. Strong communication and analytical skills are essential.