Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Summary: The Horizontal Application Governance lead is responsible for providing enterprise-wide governance, oversight, and execution transparency across applicable Technology Application Risk Programs/policy. This role serves as the central point of accountability for horizontal risk execution across all application portfolios, partnering closely with Technology Executives, Application Owners, APSE, BISO, Audit, Regulatory, and Risk Management teams. The successful candidate will drive consistency of execution, proactively identify emerging risks, influence remediation strategies, and provide executive-level reporting and escalation management. The position is highly visible and requires strong executive presence, strategic thinking, governance expertise, and the ability to drive outcomes across a large, matrixed organization.
This job is responsible for completing and tracking compliance deliverables to ensure applications adhere to policies and standards as well as local laws, rules, and regulations. Key responsibilities include supporting compliance deliverables and infrastructure requests, vendors, development teams, and technology managers to ensure timely completion of compliance activities. Job expectations include partnering with control functions, risk management, and Global Information Security teams to complete compliance deliverables effectively and efficiently.

Responsibilities:

• Completes administrative and non-technical tasks related to risk, security, and other compliance deliverables (e.g., access reviews, assessments, questionnaires, and procedural requirements) on time and per requirements for the application supported
• Tracks and supports the technical security and risk activities performed by the development teams (e.g., remediation of non permitted technology or security vulnerabilities, technical recovery planning, and disaster recovery exercises)
• Works with technology infrastructure teams to incorporate infrastructure requirements, including requests for additional storage
• Assists with audit exams and risk assessments for applications
• Works closely with vendors for vendor applications to ensure they meet bank requirements
• Maintains data about the application in AppHQ and other systems of record
• Assists with ad hoc inquiries and questions about applications
• Establish and maintain a horizontal governance framework across all technology portfolios within the CIO
• Identify, assess, and escalate systemic risk issues impacting multiple portfolios
• Drive accountability for remediation commitments and risk reduction objectives

Required Qualifications

• 5+ years of experience in Technology Risk, Cybersecurity, Compliance, Audit, Regulatory Management, Technology Delivery, or related disciplines
• Leadership experience within a large, complex organization
• Deep understanding of:
• Technology Risk Governance
• Issue Management
• Vulnerability Management
• Application Lifecycle Management
• Experience leading large-scale remediation or transformation programs
• Strong executive communication and influence skills
• Proven ability to drive results across matrixed organizations without direct authority

Desired Qualifications

• Experience building enterprise-level reporting and governance frameworks

Skills:

• Application Development
• Architecture
• Collaboration
• DevOps Practices
• Risk Management
• Analytical Thinking
• Data Management
• Financial Management
• Solution Delivery Process
• Technical Strategy Development
• Agile Practices
• Automation
• Result Orientation
• Solution Design
• Test Engineering

Shift:

Hours Per Week: