Senior Compliance & Operational Risk Leader

Bank of America; Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

Bank of America is hiring an experienced Compliance & Operational Risk Manager to provide independent second line oversight of high‑risk technology environments. You will assess control effectiveness, manage regulatory expectations, and advise senior technology leaders on risk and governance practices.

The role focuses on cyber risk, operational resilience, and regulatory objectives, with responsibilities spanning risk identification, escalation, remediation, and executive reporting to support

Qualifications

• 7+ years in operational risk, technology risk, information security, cybersecurity, compliance, audit, or related risk disciplines.
• Experience supporting regulatory examinations, risk governance, and issue remediation programs.
• Proven ability to influence senior leaders and partner across risk, audit, technology, and business teams.

Responsibilities

• Assess FLU/CF processes and controls for compliance with laws, rules, and regulations.
• Provide independent second line risk oversight across Front Line Units, Control Functions and Third Parties.
• Challenge risk acceptance decisions, remediation strategies, and control design for application security risks.
• Monitor risk indicators, report violations, and support governance routines.
• Develop independent risk management reporting for country/regional governance.
• Interpret laws and regulations to provide practical risk guidance to stakeholders.
• Review and challenge process inventories and risk & control self-assessments.
• Support executive reporting and strategic communications for senior leadership.

Skills

Operational risk

Technology risk

InfoSec

Cybersecurity

Regulatory compliance

Audit experience

Executive communication

Job description

Bank of America is hiring an experienced Compliance & Operational Risk Manager to provide independent second line oversight of high‑risk technology environments. You will assess control effectiveness, manage regulatory expectations, and advise senior technology leaders on risk and governance practices.

The role focuses on cyber risk, operational resilience, and regulatory objectives, with responsibilities spanning risk identification, escalation, remediation, and executive reporting to support