Job Posting Title Cyber Security Application Remediation Governance Analyst

Bank of America • Washington, DC

11d • $99,200 - $145,000 • Onsite

About The Position

The Application Remediation Governance candidate will help reduce technology risk by shortening the time required to remediate identified application vulnerabilities, working with application managers and risk partners to resolve them within the Bank’s risk appetite. The role will contribute to the Bank’s response to AI-identified vulnerabilities by working with application teams and driving timely remediation.

The candidate will attend security assessment report-out calls for applications within an assigned 4-dot hierarchy, track vulnerabilities in the system of record (SOR), and work with application or vendor managers through resolution. They will update vulnerability status, assist managers with technical or process questions, and help create periodic risk metrics.

The position also provides oversight and leadership for Application Remediation Governance (ARG) daily business-as-usual activities, including acting as proxy manager when required, balancing vulnerability assignments, owning ARG actions and collaboration, and representing ARG on application-vulnerability incident calls. Additional responsibilities include maintaining and enhancing the SOR, documenting ARG processes and training, managing specified BAU processes, configuring team access, producing monthly risk metrics, and onboarding new ARG team members.

The role is based at one of the listed Bank of America locations in Denver, Washington, DC, or Chicago. It is a first-shift position with a 40-hour workweek. The annual salary range is $99,200 to $145,000, with offers based on experience, education, and skill set. The role is eligible for an annual discretionary incentive plan and benefits, including paid time off.

Requirements

• At least 3 years of cyber security experience.
• Vulnerability and remediation experience.
• Ability to improve team processes to increase efficiency and coverage, including maintaining team documentation and optimizing the alignment of vulnerabilities across the team.
• Understanding of novel vulnerability vectors, primarily those aligned to AI capabilities.

Responsibilities

• Create and maintain the team's application vulnerability portfolio.
• Lead and oversee ARG daily business-as-usual activities, acting as proxy manager when required.
• Maintain a balanced distribution of vulnerabilities among ARG team members and configure the SOR so team members can view their portfolios and items requiring timely action.
• Represent ARG and manage escalation on incident calls related to application vulnerabilities, particularly P1 incidents.
• Own ARG actions and collaboration related to application vulnerability issues.
• Work with CST technical teams to keep the SOR current and functioning correctly, contribute to SOR enhancements, and represent ARG on related technical calls by providing end-user input and validating break/fix activities.
• Manage the ARG BAU process for unmasked corporate account details.
• Create and maintain official ARG process, procedure, and training documentation.
• Configure the application access package in ARM for new ARG team members.
• Create and perform quality assurance for monthly risk metrics at manager and board level.
• Train and onboard new members of the ARG team.
• Track vulnerabilities in the system of record, update their status, and work with application or vendor managers until resolution.
• Assist application and vendor managers with technical or process-related queries during vulnerability remediation.
• Understand LLM-based vulnerabilities and identify effective, timely actions to minimize cyber risk from AI-identified vulnerabilities.

Benefits

• Benefits eligibility
• Paid time off
• Annual discretionary incentive plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed