Assistant Vice President/Vice President, Senior Business Control Specialist – Technology, ITGPST

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

The APAC Team drives strong risk culture in Technology by enabling Risk Management, Portfolio Support, Issues Management, Exam/Audit Management, Compliance Oversight and Application Governance.

This role involves providing endtoend risk governance and oversight across Technology.

Key responsibilities include but are not limited to the following, to ensure consistent execution aligned to the Bank's risk framework:

• Regulatory Engagements, Audit & Assessment Management
• Issues Governance & Technology Risk and Regulatory Support
• Horizontal Risk & Control Governance
• Stakeholder & Relationship Management

This position offers broad crossfunctional exposure, interaction with regional and global stakeholders, and a path to deepen expertise in technology risk and regulatory management.

Responsibilities:

Regulatory Engagements, Audit & Assessment Management

• Lead and coordinate internal/external audits, regulatory engagements, and compliance targeted assessments, serving as the central point of contact
• Manage Requests for Information (RFIs), ensuring accuracy, consistency, and adherence to risk standards
• Maintain an updated inventory of audits, exams, and RFIs for supported technology areas
• Analyze thematic exam RFIs to anticipate future exam focus areas, build standard response library and strengthen preparation activities
• Provide guidance and procedural awareness to stakeholders to ensure highquality deliverables

Issues Governance & Technology Risk and Regulatory Support

• Manage risk matters in accordance with the established risk framework
• Facilitate risk identification, risk instruments / issues intake, execution and reporting
• Ensure that risk matters, issues, and remediation plans follow established frameworks and documented expectations
• Analyze control gaps, exam findings, and risk themes to strengthen governance across technology
• Participate in remediation activities that intersect with audit or exam deliverables for supported portfolios

Horizontal Risk & Control Governance

• Support Horizontal Risk governance activities, including assessments of new or updated Laws, Rules, Regulations, Policies and Standards applicable to technology
• Collaborate with governance leads to evaluate operational and regulatory impacts across APAC technology verticals
• Provide oversight into control consistency, alignment to global standards, and adherence to established risk practices

Stakeholder & Relationship Management

• Build strong relationships across Technology, Audit, GCOR, and global/regional stakeholders
• Facilitate discussions during audits/exams, resolve challenges, and provide updates to stakeholders and leadership
• Interface with business partners to understand processes, risks, and controls relevant to exam and governance activities

Required Skills:

• 5+ years of experience in technology internal controls, technology risk, audit, compliance, or regulatory engagement within complex organizations
• Strong understanding of technology control frameworks, risk management concepts, and governance practices
• Proven experience in managing audits, regulatory exams, or risk programs in large, complex environments
• Strong project management and organizational skills with the ability to manage multiple priorities and stakeholders effectively
• Excellent written and verbal communication skills, with the ability to clearly articulate complex concepts to senior stakeholders
• Highly detailoriented and analytical, with strong criticalthinking and problemsolving capabilities
• Ability to operate independently in a fastpaced, global environment with competing priorities
• Strong communication skills, communicate complex ideas in a clear and concise manner. Ability to deconstruct complex issues and drive timely decisions

Desired Skills:

• Experience in Banking & Markets Technology, Infrastructure Technology, Information Security or Technology Controls consulting
• Familiarity with APAC regulatory environments for technology and cybersecurity
• Professional certifications such as CISA, CISM, CRISC, CGEIT, CISSP
• Advanced Excel, automation, or Python experience helpful
• Bachelor's degree in a relevant field