Manager - Technology & Innovation

As a member of the Business Management and Controls organization at Bank of America, your role involves enabling business delivery on all GT functions including strategy, AIT Management, workspace management, workforce governance, employee engagement, risk management, application security, and vulnerability assessments. You will be responsible for reviewing high-risk security exceptions and assessing their impact on the business. Key Responsibilities: - Review and assess high-risk security and access exceptions including access to critical or high-risk blocked websites, SSL/TLS content inspection exclusions. - Perform end-to-end risk analysis by evaluating architectural flows, network paths, identity boundaries, and trust relationships. - Translate technical control deviations into clear business-level risk statements aligned to regulatory and security standards. - Evaluate the adequacy of compensating controls and partner with various teams to ensure informed decision-making. - Apply SDLC and environment awareness when evaluating risk tolerance and enforcement expectations. - Drive remediation plans or architectural fixes to reduce reliance on repeated or long-term exceptions. - Identify portfolio-level trends, systemic risks, and maintain risk dashboards and management metrics. - Promote a strong enterprise risk culture, reinforcing that exceptions are temporary and risk-owned decisions. Qualifications Required: - Any Graduation / Post Graduation. - In-depth understanding of security control objectives and the risks of control bypass. - Knowledge of IAM controls, SSL/TLS encryption, and content inspection concepts. - Ability to analyze architectural diagrams, data flows, and control touchpoints. - Strong analytical and decision-making skills grounded in facts, evidence, and risk impact. - Commitment to continuous learning in emerging threats, security architectures, and enterprise risk practices. - Proven experience collaborating with cross-functional teams (Security, Architecture, Development, Risk, Compliance). The role requires flexibility in working hours from 11.30 AM to 8.30 PM IST, as per business needs. Bank of America is committed to providing a Great Place to Work and fostering a culture of caring for its employees. By joining us, you will have the opportunity to build a successful career with opportunities to learn, grow, and make an impact in a globally recognized organization like ours. As a member of the Business Management and Controls organization at Bank of America, your role involves enabling business delivery on all GT functions including strategy, AIT Management, workspace management, workforce governance, employee engagement, risk management, application security, and vulnerability assessments. You will be responsible for reviewing high-risk security exceptions and assessing their impact on the business. Key Responsibilities: - Review and assess high-risk security and access exceptions including access to critical or high-risk blocked websites, SSL/TLS content inspection exclusions. - Perform end-to-end risk analysis by evaluating architectural flows, network paths, identity boundaries, and trust relationships. - Translate technical control deviations into clear business-level risk statements aligned to regulatory and security standards. - Evaluate the adequacy of compensating controls and partner with various teams to ensure informed decision-making. - Apply SDLC and environment awareness when evaluating risk tolerance and enforcement expectations. - Drive remediation plans or architectural fixes to reduce reliance on repeated or long-term exceptions. - Identify portfolio-level trends, systemic risks, and maintain risk dashboards and management metrics. - Promote a strong enterprise risk culture, reinforcing that exceptions are temporary and risk-owned decisions. Qualifications Required: - Any Graduation / Post Graduation. - In-depth understanding of security control objectives and the risks of control bypass. - Knowledge of IAM controls, SSL/TLS encryption, and content inspection concepts. - Ability to analyze architectural diagrams, data flows, and control touchpoints. - Strong analytical and decision-making skills grounded in facts, evidence, and risk impact. - Commitment to continuous learning in emerging threats, security architectures, and enterprise risk practices. - Proven experience collaborating with cross-functional teams (Security, Architecture, Development, Risk, Compliance). The role requires flexibility in working hours from 11.30 AM to 8.30 PM IST, as per business needs. Bank of America is committed to providing a Great Place to Work and fostering a culture of caring for its employees. By joining us, you will have the opportunity to build a successful career with opportunities to learn, grow, and make an impact in a globally recognized organization like ours.