Cloud Security Application Control Owner

Bank of America•Denver, CO

18h•Onsite

About The Position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! The Cloud Security Application Manager will be a key functional member of the Cloud Security Team within the Global Information Security (GIS) and Cyber Security Technology (CST) organizations. The role is responsible for managing the full application lifecycle for critical Cloud Security applications within Bank of America. Key responsibilities include coordinating Change, Problem, and Incident Management activities, tracking and completing compliance deliverables and ensuring applications adhere to Bank policies, standards, and applicable laws and regulations. The role partners closely with control functions, risk management, and technology teams to deliver compliance requirements efficiently and effectively. Additional responsibilities include coordinating with vendors, development, technology and infrastructure teams to support compliance activities and operational requests. Success in this position requires expertise in ensuring applications meet Bank compliance standards, strong business analysis skills, and excellent communication abilities to coordinate support across lines of business, technology partners, and vendors, particularly for Security Control delivery within public cloud environments.

Requirements

Experience working within public cloud platforms (Azure, AWS, GCP)
Knowledge of Cloud principles - DevOps, CI/CD pipelines, Infrastructure as Code (IaC), Policy as Code (PaC), etc..
Experience with the Bank’s Horizon environment, in particular use of Jira and Confluence
Experience with ServiceNow IT Service Management solution
Experience with supporting 3rd party applications
Experience with Bank of America Compliance practices
Strong communication and interpersonal skills to work effectively with cross-functional teams.
Ability to manage multiple projects and priorities concurrently in a fast-paced environment.

Nice To Haves

Application Governance
Collaboration
Risk Management
Analytical Thinking
Solution Delivery Process
Bank Compliance practices
DevOps Practices
Agile Practices
Result Orientation
Customer and Client Focus
Policies, Procedures, and Guidelines
Business Process Analysis
Business Continuity Management
Information Systems Management

Responsibilities

Support Change, Problem and Incident Management activities associated with supported applications.
Responsible for completing and tracking risk and compliance deliverables to ensure applications adhere to applicable policies and standards.
Partner closely with control functions, risk management and Technology teams to ensure technical security, risk, and other compliance activities are completed on-time and per requirements.