Application Control Specialist

Bank of America•Charlotte, NC

2d•Onsite

About The Position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Position Summary : The Horizontal Application Governance lead is responsible for providing enterprise-wide governance, oversight, and execution transparency across applicable Technology Application Risk Programs/policy. This role serves as the central point of accountability for horizontal risk execution across all application portfolios, partnering closely with Technology Executives, Application Owners, APSE, BISO, Audit, Regulatory, and Risk Management teams. The successful candidate will drive consistency of execution, proactively identify emerging risks, influence remediation strategies, and provide executive-level reporting and escalation management. The position is highly visible and requires strong executive presence, strategic thinking, governance expertise, and the ability to drive outcomes across a large, matrixed organization. This job is responsible for completing and tracking compliance deliverables to ensure applications adhere to policies and standards as well as local laws, rules, and regulations. Key responsibilities include supporting compliance deliverables and infrastructure requests, vendors, development teams, and technology managers to ensure timely completion of compliance activities. Job expectations include partnering with control functions, risk management, and Global Information Security teams to complete compliance deliverables effectively and efficiently.

Requirements

5+ years of experience in Technology Risk, Cybersecurity, Compliance, Audit, Regulatory Management, Technology Delivery, or related disciplines
Leadership experience within a large, complex organization
Deep understanding of: Technology Risk Governance Issue Management Vulnerability Management Application Lifecycle Management
Experience leading large-scale remediation or transformation programs
Strong executive communication and influence skills
Proven ability to drive results across matrixed organizations without direct authority

Nice To Haves

Experience building enterprise-level reporting and governance frameworks
Skills: Application Development Architecture Collaboration DevOps Practices Risk Management Analytical Thinking Data Management Financial Management Solution Delivery Process Technical Strategy Development Agile Practices Automation Result Orientation Solution Design Test Engineering

Responsibilities

Completes administrative and non-technical tasks related to risk, security, and other compliance deliverables (e.g., access reviews, assessments, questionnaires, and procedural requirements) on time and per requirements for the application supported
Tracks and supports the technical security and risk activities performed by the development teams (e.g., remediation of non permitted technology or security vulnerabilities, technical recovery planning, and disaster recovery exercises)
Works with technology infrastructure teams to incorporate infrastructure requirements, including requests for additional storage
Assists with audit exams and risk assessments for applications
Works closely with vendors for vendor applications to ensure they meet bank requirements
Maintains data about the application in AppHQ and other systems of record
Assists with ad hoc inquiries and questions about applications
Establish and maintain a horizontal governance framework across all technology portfolios within the CIO
Identify, assess, and escalate systemic risk issues impacting multiple portfolios
Drive accountability for remediation commitments and risk reduction objectives