Job Description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Summary

GIS Remediation Governance is seeking a highly motivated individual contributor to support enterprise risk and regulatory remediation programs. This role is responsible for governing the end-to-end remediation of regulatory findings, cybersecurity risks, audit observations, compliance issues, and technology control gaps. The successful candidate will partner closely with Global Information Security (GIS), technology teams, risk partners, audit, compliance, and business stakeholders to drive timely remediation, ensure adherence to established governance requirements, and provide transparent reporting to senior leadership.

The role requires strong analytical capabilities, executive communication skills, and the ability to influence cross-functional stakeholders to achieve sustainable risk reduction.

Responsibilities

• Key Responsibilities
• Govern and oversee remediation efforts associated with regulatory findings, audit issues, risk management activities, cybersecurity vulnerabilities, and control deficiencies.
• Monitor remediation plans, milestones, and commitments to ensure compliance with established deadlines and governance requirements.
• Partner with technology owners, remediation teams, risk partners, compliance, and audit stakeholders to validate remediation strategies and facilitate issue resolution.
• Challenge and assess remediation plans to ensure actions appropriately address underlying risks and regulatory expectations.
• Identify remediation delays, emerging risks, and potential obstacles, escalating concerns through appropriate governance channels.
• Facilitate remediation governance forums, working groups, and executive review sessions.
• Prepare executive-level reporting, dashboards, metrics, and presentations that communicate remediation progress, risk exposure, trends, and key decisions.
• Analyze risk, vulnerability, compliance, and regulatory data to identify systemic issues and opportunities for process improvement.
• Support regulatory examinations, internal audits, management reviews, and issue validation activities by providing reporting, analysis, and documentation.

Required Qualifications

• 5+ years of experience in information security, risk management, technology governance, regulatory compliance, audit, or remediation management.
• Strong understanding of risk management frameworks, regulatory expectations, and issue management practices.
• Experience managing complex cross-functional initiatives involving technology, security, compliance, or regulatory stakeholders.
• Demonstrated ability to influence without authority and drive outcomes across large organizations.
• Excellent verbal and written communication skills, including experience presenting to senior leadership.
• Strong analytical, problem-solving, and critical-thinking skills.
• Experience creating executive reporting, dashboards, and management presentations.
• Ability to analyze large datasets and translate findings into actionable insights.
• Strong organizational skills and ability to manage multiple priorities simultaneously.

Desired Qualifications

• Experience supporting regulatory examinations, Matters Requiring Attention (MRAs), audit findings, or enterprise risk initiatives.
• Knowledge of cybersecurity, vulnerability management, technology controls, and remediation lifecycle processes.
• Familiarity with governance, risk, and compliance (GRC) platforms and workflow management tools.
• Experience within a large financial services or highly regulated environment.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or equivalent.

Success Measures

• Timely closure of regulatory, risk, and audit remediation commitments.
• Effective governance and escalation of remediation risks and blockers.
• Delivery of accurate and insightful executive reporting.
• Positive regulatory and audit outcomes.
• Improved transparency, accountability, and risk reduction across the remediation portfolio.

Required Skills

Cyber Security

Data Governance

Executive Presence

Information Systems Management

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)

Pay and benefits information

Pay range

$141,700.00 - $202,700.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.