Product Manager - Secure App Delivery & Risk

Bank of America; Chicago (IL); On-site; USD 135,000 - 217,000; Full time

Benefits offered by this job

Industry-leading benefits

Discretionary incentive eligibility

Job summary

Bank of America seeks a Product Manager - Tech Delivery within the BISO group to drive secure software development across the SDLC. You will partner with CIOs, architects, and development teams to prioritize security findings, validate results, and guide risk-based decisions.

You will review and adjudicate findings from Checkmarx One and other tools, ensuring accurate risk assessments and secure delivery across cloud and on-prem environments.

Qualifications

• 10+ years in Information Security or Technology Risk.
• 5+ years in Application Security or Vulnerability Management.
• Experience with code analysis and security testing.
• Expertise in SDLC, threat modeling, and OWASP Top 10.

Responsibilities

• Review and adjudicate application security findings with evidence-based analysis.
• Independently validate vulnerabilities beyond automated results.
• Analyze code, APIs, data flows, and architecture for security impact.
• Assess exploitability and risk, and recommend mitigations.
• Collaborate with developers, architects, and risk partners to drive secure delivery.
• Ensure alignment with enterprise security standards and risk objectives.
• Review adjudication requests with supporting evidence.

Skills

Application Security

Secure SDLC

Vulnerability Management

Threat Modeling

OWASP Top 10

CWE

Communication

Stakeholder Management

Risk Assessment

Agile Practices

Security Architecture

Education

Bachelor's or Master's in CS/IT/Cybersecurity

Tools

Checkmarx One

Job description

Bank of America seeks a Product Manager - Tech Delivery within the BISO group to drive secure software development across the SDLC. You will partner with CIOs, architects, and development teams to prioritize security findings, validate results, and guide risk-based decisions.

You will review and adjudicate findings from Checkmarx One and other tools, ensuring accurate risk assessments and secure delivery across cloud and on-prem environments.