Cyber Security Application Remediation Governance Analyst

Bank of America

. Contribute to reducing technology risk by driving down application vulnerability remediation times .

Posted 9/24/2026full-timeUnited StatesMid-LevelSenior💰 $99,200 - $145,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application vulnerability management and remediation, with a strong focus on cyber security practices and team leadership. Capable of optimizing processes and maintaining documentation to enhance operational efficiency and risk mitigation.

Highest-signal resume keywords

Cyber Security ExperienceVulnerability RemediationTeam Process ImprovementLLM-Based Vulnerabilities UnderstandingRisk Metrics Creation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementApplication SecurityRisk AssessmentIncident ResponseDocumentation Maintenance

Soft Skills

LeadershipCollaborationCommunicationProblem-Solving

Tools & Technologies

System of RecordApplication Access PackagesRisk Metrics Tools

Industry Keywords

Application VulnerabilityCyber RiskAI CapabilitiesRisk AppetiteBAU Activities

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Contribute to reducing technology risk by driving down application vulnerability remediation times
Work with application managers and risk partners to resolve vulnerabilities within the Bank’s risk appetite
Respond to AI-identified application vulnerabilities and drive timely remediation with application teams
Attend report-out calls following security assessments aligned with an assigned 4-dot hierarchy
Track identified vulnerabilities in the system of record and work with application or vendor managers through resolution
Update vulnerability status in the system of record
Assist application and vendor managers with technical or process-related queries
Create periodic risk metrics
Create and maintain the team’s application vulnerability portfolio
Provide oversight and leadership for ARG daily BAU activities
Lead the ARG team and act as proxy manager when required
Maintain balanced vulnerability distribution among ARG team members
Configure the system of record to support portfolio visibility and timely action alerts
Escalate and represent ARG on incident calls related to application vulnerabilities, especially P1 incidents
Own ARG issues, actions, and collaboration
Work with CST technology teams to maintain and enhance the system of record
Represent ARG on system-of-record technology calls and validate break/fix activities
Manage the ARG BAU process for unmasked corporate account details
Create and maintain ARG process, procedure, and training documentation
Configure application access packages for new ARG team members in ARM
Create and quality-assure monthly risk metrics for manager and board level reporting
Train and onboard new ARG team members

Requirements

What you’ll need

3+ years cyber security experience
Vulnerability and remediation experience
Ability to improve team processes to increase efficiency and coverage
Experience maintaining team documentation and optimizing alignment of vulnerabilities among the team
Understanding of novel vulnerability vectors, primarily those aligned to AI capabilities
Good understanding of LLM-based vulnerabilities and effective actions to minimize cyber risk
Ability to work 1st shift
Ability to work 40 hours per week

Benefits

Comp & perks

Discretionary incentive eligible; eligible to participate in the annual discretionary plan
Benefits eligible
Access to paid time off
Resources and support for employees
In-office culture with role-specific flexibility based on responsibilities and business needs
Opportunities to learn, grow, and make an impact