AI-Driven App Remediation & Governance Lead

Bank of America Corporation; Washington; On-site; USD 99,000 - 145,000; Full time

Benefits offered by this job

Benefits eligible

Discretionary incentive

Annual discretionary plan

Job summary

Bank of America Corporation is seeking an Application Remediation Governance professional to reduce technology risk by driving timely remediation of vulnerabilities across applications. The role focuses on AI‑identified vulnerabilities, working with application managers and risk partners to align remediation with the bank’s risk appetite.

The candidate will track vulnerabilities, coordinate with vendors, and contribute to periodic risk metrics and governance reporting.

Qualifications

• 3+ years cyber security experience.
• Vulnerability and remediation experience.
• Ability to improve team processes to increase efficiency and coverage.
• Understanding of novel vulnerability vectors, primarily those aligned to AI capabilities.

Responsibilities

• Creates and maintains the team's application vulnerability portfolio.
• Lead the Bank’s response to AI-identified vulnerabilities to minimize cyber risk.
• Oversee and lead ARG daily BAU activities.
• Provide proxy management for the ARG when required.
• Ensure workload balance across team members for vulnerabilities.
• Configure the SOR for portfolio visibility and timely action reminders.
• Escalate and represent the ARG on Incident calls related to application vulnerabilities (P1s).
• Own ARG actions and collaborate across teams to resolve issues.

Skills

Cyber security

Vulnerability remediation

Process improvement

AI vulnerabilities

Job description

Bank of America Corporation is seeking an Application Remediation Governance professional to reduce technology risk by driving timely remediation of vulnerabilities across applications. The role focuses on AI‑identified vulnerabilities, working with application managers and risk partners to align remediation with the bank’s risk appetite.

The candidate will track vulnerabilities, coordinate with vendors, and contribute to periodic risk metrics and governance reporting.