Product Manager - Secure Software Delivery & Risk

Bank of America; Washington (District of Columbia); On-site; USD 170,000 - 210,000; Full time

Job summary

Bank of America is seeking a Product Manager – Tech Delivery within the BISO organization to drive secure software delivery across the SDLC. You will partner with LOB CIOs, CTOs, developers, and risk partners to translate security risk into actionable project plans.

You will review application security findings, validate vulnerabilities, and guide remediation decisions while aligning with enterprise security standards and risk-management objectives.

Qualifications

• 10+ years in Information Security, Application Security, or Tech Risk.
• 5+ years in Application Security and related domains.
• Experience with source code analysis, vulnerability validation, and security testing.
• SME in App Security, Secure SDLC, Vulnerability Management, Threat Modeling, CWE/OWASP.
• Experience with Checkmarx One or comparable platforms.
• Ability to assess complex SAST/SCA and API Security findings with risk-based analysis.
• Strong communication of risk and remediation to technical and non-technical stakeholders.

Responsibilities

• Serve as primary reviewer for application security findings from Checkmarx One and other tools.
• Review, analyze, validate, and disposition findings with evidence-based analysis.
• Independently validate vulnerabilities beyond automated scans and prior dispositions.
• Analyze code, APIs, data flows, and architecture to assess risk and impact.
• Evaluate exploitability, attack paths, and compensating controls.
• Review adjudication requests and support evidence packages.

Skills

Financial Management

Influence

Solution Delivery Process

Stakeholder Management

Technical Strategy Development

Agile Practices

Analytical Thinking

Collaboration

Result Orientation

Risk Management

Business Acumen

Business Case Analysis

Data Management

Solution Design

Vendor Management

Education

Bachelor's/Master's in Computer Science / IT / Cybersecurity or related field

Tools

Checkmarx One

GitHub Copilot

Job description

Bank of America is seeking a Product Manager – Tech Delivery within the BISO organization to drive secure software delivery across the SDLC. You will partner with LOB CIOs, CTOs, developers, and risk partners to translate security risk into actionable project plans.

You will review application security findings, validate vulnerabilities, and guide remediation decisions while aligning with enterprise security standards and risk-management objectives.