> Markdown version of [/jobs/ext/3800884-identity-and-access-management-iam-governance-senior-specialist-data-transformation-modernizati](https://www.wearedevelopers.com/jobs/ext/3800884-identity-and-access-management-iam-governance-senior-specialist-data-transformation-modernizati). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity and Access Management (IAM) Governance Senior Specialist (Data Transformation & Modernizati - **Company:** Bank of America - **Location:** Boston, MA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Data Analysis, User Authentication, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Data Transformation, Identity and Access Management, Information Security Management, Python (Programming Language), Metadata, Role-Based Access Control, Power BI, Azure Active Directory, SQL Databases, Tableau (Software), Scripting, Google Cloud, Okta, Cyberark, Microsoft Power Automate, Office365, Agentic-AI, Microsoft Copilot Studio, Tools for Reporting, Azure AI, SailPoint, Terraform, Splunk - **Published:** October 17, 2026 - **Apply:** https://www.bostonjobsite.com/job.asp?id=3454749409&tx=FK906PFK&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * 10+ years of IAM, Cybersecurity, Access Management, or closely related experience. * Demonstrated experience leading IAM, access-control, identity-governance, or authorization transformation that materially changed legacy processes, operating models, or technical capabilities. * Demonstrated ability to define future-state IAM strategy, develop actionable roadmaps, challenge established approaches, and influence enterprise adoption. * Experience designing, implementing, or governing enterprise access controls, SoD, role-based access, entitlement governance, role engineering, certification, and access lifecycle management, preferably within a large regulated organization. * Demonstrated hands-on experience using analytics, automation, scripting, AI-enabled solutions, workflow optimization, or reporting to improve IAM outcomes, control effectiveness, risk identification, and operational efficiency. * Experience building or using IAM dashboards, metrics, data analysis, or reporting to identify trends, support decisions, measure control effectiveness, and drive remediation. * Ability to translate analytical findings and automation opportunities into scalable IAM processes, controls, and measurable outcomes. * Experience implementing or governing RBAC, ABAC, PBAC, JIT, runtime, and related access-control frameworks. * Experience designing or maturing IAM operating models, including ownership, decision rights, exception governance, escalation, accountability, and service boundaries. * Experience governing human and non-human identities and associated lifecycle, ownership, entitlement, credential, and access-review requirements. * Experience with identity correlation, entitlement normalization, ownership metadata, reconciliation, and data-quality controls across heterogeneous environments. * Strong knowledge of IAM architecture, identity attributes and metadata, authentication, federation, least privilege, and access-control principles. * Strong experience influencing Architecture, Engineering, Security, Product, and Business stakeholders across organizational boundaries. * Knowledge of relevant security and control frameworks, including NIST, ISO, FFIEC, COBIT, or CSA., * Deep knowledge of SoD modernization, toxic or incompatible access combinations, entitlement governance, role engineering, entitlement taxonomy, and access analytics. * Thought leadership in emerging IAM capabilities, including access intelligence, AI-assisted IAM, non-human identity governance, continuous authorization, or next-generation entitlement governance. * Advanced experience applying analytics, scripting, automation, AI agents, or workflow technologies to IAM use cases such as entitlement analysis, access reviews, control monitoring, remediation, quality assurance, and self-service. * Experience with IGA platforms such as SailPoint, Saviynt, Microsoft Entra ID Governance, Okta, or equivalent technologies. * Experience with privileged access management platforms such as CyberArk or equivalent. * Cloud IAM, Cloud Security, or Cloud Entitlement Management experience across AWS, Azure, GCP, SaaS, or cloud-native environments. * Experience with cloud permission models, cloud roles and identities, CIEM, or cloud entitlement analytics. * Experience with security, automation, analytics, and reporting tools such as Wiz, Terraform, BloodHound, Splunk, Microsoft Copilot Studio, Power Automate, Microsoft 365 Copilot, Tableau, Power BI, Python, SQL, or similar technologies. * Excellent executive communication and stakeholder engagement skills, with demonstrated ability to influence through expertise, collaboration, credibility, and strategic thinking. * Relevant IAM, security, cloud, data, automation, or AI certifications such as CISSP, CCSP, CRISC, CISM, AWS Security Specialty, Azure Security Engineer, Azure AI Engineer Associate, AWS AI Practitioner, or equivalent. ## Description Global Information Security (GIS) protects the Bank's information systems, confidential and proprietary data, and customer information. Within GIS, Identity and Access Management (IAM) ensures the right identities have the right access to the right resources at the right time and in the appropriate context, supporting security, risk, regulatory, and operational requirements., The role will lead transformation across current-state assessment, future-state design, roadmap development, standards and governance, implementation, stakeholder adoption, control-effectiveness measurement, and transition to sustainable operating ownership across human and non-human identities. A core expectation is the ability to use analytics, automation, scripting, AI-enabled solutions, workflow optimization, and reporting to improve IAM decisions, controls, user experience, and operational outcomes. Cloud IAM and cloud entitlement-management experience are preferred complementary capabilities but are not required., * Lead end-to-end IAM transformation from current-state assessment and future-state design through implementation, adoption, control validation, and sustainable operating ownership. * Define and advance enterprise access controls, SoD, entitlement governance, role engineering, and access models, translating strategy into executable roadmaps. * Modernize SoD design, rule engineering, preventive and detective controls, oversight, remediation, and exception management. * Advance RBAC, ABAC, PBAC, Just-in-Time (JIT), runtime authorization, and related access-control models to reduce excessive, conflicting, and unnecessary access. * Establish standards for role engineering, entitlement taxonomy, permission management, access profiling, ownership metadata, and access-model design. * Define scalable IAM operating models covering decision rights, ownership, exception authority, escalation, service boundaries, and accountability across IAM, Technology, Security, and Lines of Business. * Advance governance across human and non-human identities, including workforce and privileged identities, service accounts, workload and application identities, APIs, automation identities, and emerging AI-agent identities. * Define data, metadata, correlation, normalization, reconciliation, ownership, and quality requirements supporting reliable access decisions, SoD analysis, role engineering, certification, analytics, and control measurement. * Use analytics, automation, scripting, AI-enabled solutions, workflow optimization, and reporting to identify access risk, improve control effectiveness, reduce manual effort, accelerate decision-making, and scale IAM governance. * Develop dashboards, metrics, analytics, and reporting that provide actionable insight into entitlements, permissions, access patterns, SoD conflicts, exceptions, lifecycle performance, and control effectiveness. * Identify opportunities to automate repetitive IAM activities and apply AI-assisted analysis to improve governance, quality assurance, remediation workflows, and operational efficiency. * Define outcome-based measures for risk reduction, role and entitlement quality, exception aging, access-review effectiveness, lifecycle performance, automation adoption, and control sustainability. * Review and challenge access-control designs, entitlement models, role structures, and transformation proposals for alignment with IAM principles, least privilege, SoD requirements, and sustainable operating practices. * Drive stakeholder adoption across IAM, Security, Technology, Architecture, Engineering, Product, and Lines of Business, and translate complex IAM risks and transformation outcomes into clear business decisions for senior leadership., Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates. View your "Know your Rights (https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf) " poster. View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .