Bank of America Logo

Bank of America

Cybersecurity Software Development Life Cycle (SDLC) Sr. Manager

Posted 17 Days Ago
Be an Early Applicant
5 Locations
152K-208K Annually
Senior level
5 Locations
152K-208K Annually
Senior level
The Cybersecurity SDLC Sr. Manager leads security integration in the software development life cycle, managing risk assessments and compliance, while enhancing team training and awareness in secure coding practices.
The summary above was generated by AI

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

The Cybersecurity SDLC Sr. Manager will lead the integration of security practices throughout the Software Development Life Cycle (SDLC). This role involves developing and enforcing security policies, managing risk assessments, and ensuring compliance with Application Security Standards. The executive will collaborate with cross-functional teams to implement secure coding practices, policy development, and training and awareness across the stakeholder community. They will also monitor emerging cybersecurity threats and drive continuous improvement initiatives to enhance overall software security. A deep understanding of cybersecurity frameworks and risk management is required. 10+ years of experience is generally required

Required Skills:

  • Strategic Leadership: Develop and implement cybersecurity strategies throughout the Software Development Life Cycle (SDLC).
  • Risk Management: Identify and mitigate security risks associated with software development and deployment.
  • Policy Development: Create and enforce security policies, standards, and guidelines related to SDLC processes.
  • Teams Collaboration: Collaborate with development, QA, and operations teams to ensure security best practices are integrated at every stage of the SDLC.
  • Training & Awareness: Lead training programs to enhance team awareness of secure coding practices and cybersecurity threats.
  • Compliance Oversight: Ensure adherence to industry regulations and compliance standards (e.g., GDPR, HIPAA).
  • Continuous Improvement: Monitor and assess the effectiveness of security measures, driving continuous improvement initiatives.
  • Stakeholder Engagement: Communicate security risks and strategies to senior management and other stakeholders.
  • Technical Expertise: Significant knowledge of cybersecurity threats, controls and technologies, with a deep understanding/experience with software developer experiences

Responsibilities are the stabilization and transformation of the GIS Secure coding work and continued partnership with EET on the future state of Development Pipeline transformation.

  • Stability Secure Coding Risk and Issues.
  • Establish and execute a clear path forward for executing Secure Coding and SbD Integration.
  • Establish long term direction for Secure Coding; Start/Stop/Continue

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)

Pay and benefits information

Pay range$151,500.00 - $208,300.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Top Skills

Application Security Standards
Compliance Standards Such As Gdpr And Hipaa
Cybersecurity Frameworks
Development Tools
Risk Management Tools
Secure Coding Practices
HQ

Bank of America Charlotte, North Carolina, USA Office

100 North Tryon Street, Charlotte, NC, United States, 28202

Similar Jobs

15 Hours Ago
Littleton, CO, USA
110K-157K Annually
Senior level
110K-157K Annually
Senior level
Aerospace • Cloud • Digital Media • Information Technology • Mobile • News + Entertainment • Retail
The 5G Network Security Architect leads the design and implementation of security frameworks, focusing on IAM and Zero Trust architecture to enhance security across EchoStar's digital ecosystem.
Top Skills: Cti FrameworksCyber Security PrinciplesPenetration Testing ToolsVulnerability Assessment Tools
15 Hours Ago
Hybrid
Denver, CO, USA
152K-228K Annually
Senior level
152K-228K Annually
Senior level
Consumer Web • eCommerce • Marketing Tech • Retail • Software • Analytics • Generative AI
The Senior Security Engineer will enhance network security protocols, manage cloud infrastructures, and lead strategic initiatives to secure network systems. Responsibilities include monitoring network traffic, implementing security solutions, and conducting security assessments.
Top Skills: AnsibleAWSAzureCisco Asa/FirepowerGCPIds/IpsIncident ResponsePalo Alto NetworksPythonVpcVpn
Yesterday
Hybrid
3 Locations
95K-180K Annually
Mid level
95K-180K Annually
Mid level
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
The Windows Endpoint Applications Administrator develops security standards, administers client security tools, manages system configurations, troubleshoots issues, and evaluates new technologies to enhance enterprise-level client security.
Top Skills: IntuneIvantiJAMFPowershellSccmWorkspace One

What you need to know about the Charlotte Tech Scene

Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.

Key Facts About Charlotte Tech

  • Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
  • Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
  • Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
  • Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
  • Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account