W2 Resource for this position on referral basis.

Note to Vendor: 

This is an IT Governance / GRC / Information Security Compliance role. We need candidates with experience in IT Governance, Risk & Compliance, Access Management, Change Management, IT Risk, Application Inventory (AIT), Security Compliance, and IT Operations. Experience with ServiceNow, ITIL, documentation, audits, and stakeholder coordination is highly preferred.

Please submit local candidates who can work 3 days onsite in Chandler, AZ. Target profiles include IT Governance Analyst, GRC Analyst, IT Risk Analyst, IT Compliance Analyst, or Information Security Governance Analys

Client: Bank of America (BOA/Bofa)

Job ID: BACJP00223687

Candidate Type: No Visa Sponsorship Candidate required.

Submission Deadline: 07/27/2024

Interview: 2 Virtual rounds or may be requested for an onsite as well.

Client Type: Direct (MSP/VMS)

Feedback: If you don't hear anything from me, follow up after 4-6 hours.

Job Details

Client Job ID: BACJP00223687 

Job Title: IT Business Analyst/ IT Governance / GRC Analyst

Job Location: Chandler, AZ

Job type: 12 Months contract

Job Description:

AIT (Inventory Management System) Management

Queue Management of Technical and Information Security deliverables

Not Permitted Technology (NPT) Target Dates & Date Modifications

P2/P3 Compliance, Patch scheduling and CM verifications

Risk Management - Documentation of the Risk and remediation or compensation controls

Access request approvals and reviews

Firewall request approvals and reviews

Change Management request approvals and reviews

Service ID Management and Attestations

Work with AIT SMEs

Strong communication and follow-up skills

Break Fix communication follow-up

Decommissioning and Creation of AITs

Significant Change Assessment & Approvals

Access Business Rule Engine Management

Violation, eligibility, toxic combinations & exceptions

Communication with AIT Engineering teams

Trident Survey (GIS) Responses and Attestations

Dormancy Management (Use it or Lose It)

Point of Contact for any requests or inquiries regarding AIT

Enterprise Critical Infrastructure (ECI) Team Librarian

Ensuring all ECI Program-required documents-Restoral Plans, Restoral Test Plans, Restoral Test Execution Plans-are stored in the required repositories:

FileNet

FORP (with uploads performed by the ECI FORP Administrator)

Team NFS

Managing access permissions for all ECI documents across these repositories

Coordinating and overseeing required quarterly FORP testing and managing the ECI teams FORP user population

Yearly documentation reviews of below information within the ECI documentation

ECI recovery support contacts (including vendors)

ECI Inventory (Hosts and VMs)

ECI AITs (currently 7)

Necessary training and guidance from IOR Strategy and Governance to perform these functions.