Compliance and Operational Risk Manager – Application Security, Technology Risk Oversight

Bank of America

. Execute second-line-of-defense compliance and operational risk oversight for Front Line Units, Control Functions, and third parties .

Posted 9/17/2026full-timeCharlotte • Illinois • United StatesSeniorLead💰 $97,200 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in operational risk management, cybersecurity, and compliance within financial institutions, with a strong focus on technology governance and third-party risk management. Proficient in regulatory compliance, risk assessment, and effective communication with senior leadership.

Highest-signal resume keywords

Operational Risk ManagementCybersecurity ExpertiseCompliance OversightData Analysis ProficiencyRegulatory Examination Support

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Operational Risk AssessmentCyber Risk ManagementApplication SecurityTechnology GovernanceRisk RemediationData AnalysisVulnerability ManagementSoftware Development Lifecycle ControlsAI Risk AssessmentRegulatory Compliance

Soft Skills

Clear CommunicationInfluencing Senior LeadersEffective Partnership

Tools & Technologies

NIST CSFITGPST ProcessesGlobal Compliance ToolsIssues Management Tools

Certifications & Qualifications

CISSPCISMCRISCCISA

Industry Keywords

Operational ResilienceThird-Party Risk ManagementGlobal ComplianceTechnology PoliciesEmerging Technology Risks

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Execute second-line-of-defense compliance and operational risk oversight for Front Line Units, Control Functions, and third parties
Ensure implementation of Global Compliance and Operational Risk policies, programs, and standard operating procedures
Identify, challenge, escalate, and mitigate compliance and operational risks
Assess risks and effectiveness of Front-Line Unit processes and controls for compliance with laws, rules, and regulations
Respond to regulatory inquiries, audits, and examinations
Oversee compliance and operational risk related to third-party/vendor relationships
Identify issues, escalate problems, and drive root-cause remediation
Monitor processes, risks, controls, metrics, risk appetite, and limits
Develop independent risk-management reporting for governance and management routines
Analyze laws, rules, and regulations and provide practical stakeholder advice
Review and challenge processes, risks, inventories, and risk and control self-assessments
Monitor adherence to Global Technology policies and standards
Perform inline reviews of ITGPST issue-management activities, including regulatory-issue remediation
Provide second-line oversight of the Application and Technology Security Assessment program
Assess technology and cyber risks across critical applications, business processes, and technology environments
Review and challenge risk acceptance decisions, remediation strategies, and application-security control design
Monitor emerging technology and AI-related risks, cyber threats, governance frameworks, and control environments
Support executive reporting, governance routines, and strategic communications for senior leadership
Evaluate adherence to enterprise risk-management standards, technology policies, and regulatory expectations
Partner with technology, cybersecurity, risk, audit, and business teams to strengthen operational resilience and risk management

Requirements

What you’ll need

7+ years of experience in operational risk, technology risk, information security, cybersecurity, compliance, audit, or related risk management disciplines, preferably within a large financial institution
Expertise in cybersecurity, application security, technology governance, third-party technology risk management, or operational resilience
Ability to influence and challenge senior leaders and executive stakeholders while maintaining effective partnerships
Experience supporting regulatory examinations, audit engagements, issue remediation programs, and risk governance activities
Experience with the Global Compliance & Operational Risk program from a first- or second-line perspective
Clear and impactful communication skills, including executive-level engagement
Understanding of AI-related risks, governance considerations, cybersecurity implications, and technology-enabled risk management solutions
Familiarity with GCOR programs, Global Technology policies, and ITGPST processes and risks
Skill in identifying, assessing, and remediating operational risks and issues
Proficiency in generating actionable insights through data analysis and reporting tools
Proficiency in industry security frameworks, such as NIST CSF, and applicable laws, rules, and regulations
Familiarity with Application Technology Security Assessments, vulnerability management, software development lifecycle controls, or application security testing programs
Understanding of emerging technology risks, including AI governance, model risk considerations, and cybersecurity implications of AI-enabled technologies
Professional certifications such as CISSP, CISM, CRISC, CISA, or equivalent risk and technology certifications are desired
Second- or third-line-of-defense experience or experience in a business risk and controls role is desired
Familiarity with the Global Compliance & Operational Risk program and related tools/applications is desired
Familiarity with the Issues Management program and tools is desired

Benefits

Comp & perks

Annual discretionary incentive plan eligibility
Benefits eligibility
Paid time off
Resources and support for employees
In-office culture with an appropriate level of flexibility based on role-specific responsibilities and business needs
Opportunities to learn, grow, and make an impact