Malware Defense Artificial Intelligence (AI) Control Owner

Bank of America•Charlotte, NC

1d•Onsite

About The Position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Role Summary: AI-related technologies, risks, and response activities represent a rapidly growing area of responsibility for Malware Defense. The Malware Artificial Intelligence Control Owner will lead the development and execution of Malware Defense's AI strategy, with responsibility for evaluating AI-enabled capabilities, overseeing approved use cases, managing associated risks, and supporting governance and compliance requirements. This role will partner with Malware Defense leadership, technology teams, risk partners, and governance organizations to determine how AI and machine learning capabilities can be responsibly integrated into malware prevention, detection, analysis, and response workflows. The Control Owner will also help ensure that implemented capabilities are appropriately governed, monitored, documented, and aligned with enterprise standards.

Requirements

Strong understanding of artificial intelligence and machine learning concepts, including LLMs and RAG.
Knowledge of security threats and attack techniques affecting AI models and AI-enabled applications.
Experience with the bank’s AI tollgate and Model Risk Management processes.
Understanding of AI governance, model lifecycle management, model validation, model monitoring, and human-oversight concepts.
Experience identifying and managing technology, security, operational, data, and compliance risks.
Ability to evaluate AI use cases, define control requirements, and translate technical risks into actionable recommendations.
Strong documentation, analytical, and problem-solving skills.
Strong written and verbal communication skills, with the ability to communicate effectively with technical teams, risk partners, oversight organizations, and senior leaders.
Ability to work independently, lead cross-functional initiatives, and drive activities through completion.

Nice To Haves

Experience applying AI, machine learning, and automation to cybersecurity use cases such as threat detection, threat hunting, malware analysis, incident response, and security operations.
Familiarity with AI security concepts, including secure AI development, adversarial machine learning, prompt security, data protection, model testing, and governance practices.
Experience integrating AI capabilities into security tools and workflows, including working with large-scale security telemetry from EDR, SIEM, network, and identity platforms.
Understanding of malware defense, threat management, offensive security techniques, and the use of AI to enhance red teaming, threat modeling, and attack path analysis.
Experience developing operational metrics, dashboards, executive reporting, and control monitoring within a large, highly regulated enterprise environment.
Relevant cybersecurity, cloud, AI, risk management, or model governance certifications are desirable but not required.

Responsibilities

AI Strategy & Control Ownership: Lead Malware Defense's AI strategy, governance, and control oversight, ensuring AI capabilities align with enterprise standards and risk requirements.
AI Subject Matter Expertise: Serve as the AI subject matter expert, evaluating emerging technologies and identifying opportunities to strengthen malware detection, investigation, response, and automation.
Risk Management & Governance: Identify and manage AI-related risks, evaluate threats to AI systems, and partner with governance, compliance, Model Risk Management, and risk teams to support approvals, audits, and control oversight.
Technology Integration & Oversight: Collaborate with engineering, security operations, and incident response teams to integrate AI capabilities into Malware Defense workflows while establishing appropriate testing, monitoring, and validation requirements.
Metrics, Reporting & Stakeholder Engagement: Develop performance and risk metrics, provide leadership reporting, maintain governance documentation, and communicate AI-related risks, controls, and recommendations to technical and non-technical stakeholders.