Product Manager, App Security & Risk Delivery

Bank of America; Chicago (IL); On-site; USD 150,000 - 210,000; Full time

Job summary

Bank of America seeks a Product Manager – Tech Delivery within the BISO organization to partner with CIOs, architects, and development teams to drive secure software delivery across the SDLC. You will review and adjudicate security findings, validate vulnerabilities, and guide risk-based decisions to protect enterprise systems.

You will collaborate with security engineers, product owners, and risk partners to enable secure development, vulnerability remediation, and alignment with enterprise

Qualifications

• 10+ years in Information Security or Technology Risk Management.
• 5+ years in Application Security or Vulnerability Management.
• Strong experience with source code analysis and security testing.
• Expertise in OWASP Top 10, CWE, and security frameworks.

Responsibilities

• Review and adjudicate application security findings.
• Analyze source code, architectures, APIs and data flows for security risk.
• Validate vulnerability findings with evidence-based analysis.
• Drive secure development practices and remediation across teams.

Skills

Application Security

Secure SDLC

Vulnerability Management

Threat Modeling

SAST/ SCA

Risk-based Analysis

DevSecOps

Communication

Security Testing

Education

Bachelor's or Master’s in CS/IT/Cybersecurity/SE

Tools

Checkmarx One

Job description

Bank of America seeks a Product Manager – Tech Delivery within the BISO organization to partner with CIOs, architects, and development teams to drive secure software delivery across the SDLC. You will review and adjudicate security findings, validate vulnerabilities, and guide risk-based decisions to protect enterprise systems.

You will collaborate with security engineers, product owners, and risk partners to enable secure development, vulnerability remediation, and alignment with enterprise