Compliance Governance Remediation Analyst

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

The Remediation Analyst will join the Global Information Security (GIS) Cyber Security Assurance (CSA) Control Gap Remediation Governance team and support the timely, sustainable resolution of application compliance findings. This mid-level role evaluates remediation plans and evidence, monitors progress, identifies risks and dependencies, and partners with application teams, technology stakeholders, risk partners, third parties, and GIS subject-matter experts. The analyst will provide clear guidance and reporting, elevate obstacles when appropriate, and help strengthen remediation governance processes across the application portfolio.

• Manage a portfolio of application compliance findings from assignment through validation and closure.
• Assess findings, remediation plans, milestones, owners, dependencies, and target dates for completeness, feasibility, and alignment with GIS requirements.
• Review submitted evidence to confirm corrective actions adequately address identified compliance risk.
• Partner with application owners, technology teams, risk partners, vendors, and GIS subject matter experts to resolve remediation gaps.
• Monitor remediation progress and identify overdue actions, recurring issues, control gaps, and audit concerns.
• Provide remediation guidance while maintaining independent, evidence-based analysis.
• Escalate material risks, missed commitments, evidence deficiencies, and barriers to closure.
• Maintain accurate governance records and support data-quality reviews.
• Contribute to documentation, quality controls, process improvements, and team cross-training.

• 3+ years of experience in information security, technology risk, audit, compliance, application security, or a related technical field.
• Experience analyzing compliance findings, control gaps, remediation plans, or supporting evidence.
• Ability to interpret policies, standards, procedures, and technical information.
• Strong analytical, problem-solving, organizational, and documentation skills.
• Ability to manage multiple priorities independently.
• Strong written and verbal communication skills.
• Proficiency with Microsoft Office applications, including Excel and PowerPoint.

• Working knowledge of application security, secure coding, identity and access management, data protection, vulnerability management, or security monitoring and response.
• Experience with remediation governance, issue management, risk acceptance, audit, or regulatory compliance processes.
• Experience facilitating stakeholder discussions and driving issues toward closure.
• Information security, risk, audit, or compliance certifications/coursework preferred.

• Controls Management
• Cyber Security
• Data Governance
• Information Systems Management
• Risk Management
• Architecture
• Customer and Client Focus
• Executive Presence
• Threat Analysis
• Vendor Management
• Advisory
• Business Acumen
• Business Intelligence
• Cloud Solutions
• Technology System Assessment

This job will be open and accepting…