Info Security Manager

Info Security Manager Location: Mumbai, India

About us At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities, and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career, and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive, and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership, and innovation, strengthening our workforce and positively impacting the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.

Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence, and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank's Information Security strategy and policy, manages the Information Security program, and identifies and addresses vulnerabilities. They develop, deploy and manage a risk-based controls portfolio, managing and operating a global security operations center that monitors, detects, and responds to cybersecurity incidents.

The GIS Identity & Access Management (IAM) Access Control Team's goal is to ensure that the control processes and effectiveness are within the identified risk tolerance. They manage the performance and effectiveness of the working control through the establishment of metrics with thresholds, validating the reasonability of Laws, Rules, and Regulations mapping alignment to the controls as aligned by the GIS Policy team.

In support of the Cloud Security program and the delivery of an operational framework, the role requires hands-on knowledge and experience with the policies, tools, configurations, and rules needed to deploy solutions that manage the security of cloud platforms and reduce risk to bank workloads in the cloud.

The role supports the strategy, architecture, and roadmap for IAM controls in cloud environments and helps drive implementation of the designed control environment. This includes developing cloud IAM requirements based on threat models, laws, rules, and regulations, driving related updates to Policy, Standards, and Baselines, and assessing operational readiness of process and technical capabilities to implement the required controls.

The successful analyst is result-oriented and business-focused, and succeeds at interfacing across multiple organizational units at various levels.

Responsibilities

Ensure IAM technology and controls for cloud are implemented, monitored, and adhered to established IAM standards. Achieve intended cloud IAM outcomes through the development and enhancement of applicable standards, processes, data elements, oversight, and governance for the bank's cloud infrastructure, systems, and applications. Develop cloud IAM requirements based on threat models, laws, rules, and regulations, and drive related updates to Policy, Standards, and Baselines. Assess operational readiness of process and technical capabilities to implement required controls; determine whether existing or proposed controls satisfy policy, regulatory, and control requirements. Appropriately assess risk when business and technology decisions are made, demonstrating a risk management mindset to safeguard the bank's reputation, clients, and assets by driving compliance with applicable laws, rules, and .