Analyst II - Tech Delivery

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

This job is responsible for capturing and refining business or system requirements that may involve a software change. Key responsibilities include working with stakeholders to understand their needs, analyzing problems, capturing requirements, creating solutions, solving problems either manually or through software, and providing subject-matter expertise on products to support scope and requirement decisions. Job expectations include collaborating with project stakeholders to analyze and confirm requirements, creating, analyzing, and improving processes and writing user and technical stories.

Position Summary:

The Cloud Compliance Analyst/Engineer is a client-facing role that provides risk management support to all BOFA CIO-Line of Businesses by applying the CGA (Cloud Governance Authority) Control Objective Applicability Matrix to applications who want to use cloud service providers (Azure, AWS, GCP), ensuring adherence to posted bank policies, standards, and requirements.  

Responsibilities:

• Understands stakeholder needs to help envision and create a solution to solve a problem
• Supports cost and benefit analysis to align technology solutions to business strategy
• Gathers and catalogs functional, non-functional, and technical requirements for stakeholder requests
• Identifies the impact of modifications and enhancements to applications and assists with identifying integration points and the end-to-end solution design
• Assists users and development teams in application testing and troubleshooting, and may help with test planning and configuring test solutions to validate functional and system needs
• Documents processes, procedures and workflows for technology as needed
• This candidate ensures that the controls used to mitigate business and application risks are properly implemented within the client’s ecosystem, are fully executed, and sustainable for each Use Case presented to the CGA searching production approval.
• The Cloud Compliance Analyst/Engineer serves as a consultant in maintaining quality of evidence and the oversight and response to inquiry/examination of control evidence as proof applications are secure by design and production ready. Workloads and Services.
   

Required Qualifications:

• Comprehensive baseline knowledge of all applicable IT policies, standards, and requirements applicable to implement the BOFA Cloud Model.
• Decipher and apply BOFA Global IT Policy Standards to the CGA (Cloud Governance Authority) published control objectives. Including, navigating various SOR (System of Record) and related IT processes to prove compliance.
• Maintain knowledge of CSP (Cloud Service Providers - Azure, AWS, and GCP) Platform functionality, and related services such as Azure Sentinel, Azure Blob.
• Ability to understand key Cloud technologies and application development concepts, such as Terraform, CI /CD pipelines, code repositories, change management procedures, and automated testing.
• Work with; CIO LOB – UCR (cloud use case requestors), Application Teams (Developers, Dev/ops Engineers, Change Management, SRE (Site Reliability Engineers, Engineering Operations, and IT governance bodies (DMZ Center of Excellence, Cloud Governance Authority, Cloud Architecture Design Authority).
• Ability to decipher and follow engineering data flow diagrams (DFD), overlay relevance of IT standards and relevance to existing cloud compliance principals. IT Risk and Process Management (IT Risk and Controls Process) and systems; SPI (Single Process Inventory), and POP (Process Owners Portal), industry standard Risk and Control Design Concepts.

Desired Qualifications:

• Experience in agile development and tooling.
• Excellent communication, organizational leadership, coaching, and troubleshooting skills.
• Strong executive presence and the ability to communicate complex technology solutions to senior stakeholders.
• Critical thinking
• Self management

Skills:

• Agile Practices
• Analytical Thinking
• Business Acumen
• Collaboration
• Solution Delivery Process
• Influence
• Result Orientation
• Risk Management
• Solution Design
• Stakeholder Management
• Other

Shift:

1st shift (United States of America)

Hours Per Week: 

40