Vice President/Senior Vice President, Senior Delivery Lead – Cloud Control Objectives & Regulatory Compliance, Core Technology Infrastructure

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Core Technology Infrastructure:

• Believes diversity makes us stronger so we can reflect, connect and meet the diverse needs of our clients and employees around the world.
• Is committed to building a workplace where every employee is welcomed and given the support and resources to perform their jobs successfully.
• Wants to be a great place for people to work and strives to create an environment where all employees have the opportunity to achieve their goals.
• Provides continuous training and development opportunities to help employees achieve their career goals, whatever their background or experience.
• Is committed to advancing our tools, technology, and ways of working to better serve our clients and their evolving business needs.
• Believes in responsible growth and is dedicated to supporting our communities by connecting them to the lending, investing and giving them what they need to remain vibrant and vital.

Job Description:

This job is responsible for planning and coordinating the execution of large program deliverables which requires engagement across multiple organizations. Key responsibilities include communicating target outcomes, coordinating delivery, resource planning, providing visibility of program health, and managing program risks, compliance and financials. Job expectations include ensuring delivery meets the client’s expectations in terms of the target outcomes, timeline, and cost and facilitating sync points between business and technology leaders and Risk and Compliance partners.

Position Summary:

This role is within the Cloud Governance team that manage the end to end process of Regulatory impacts to the Cloud defined by Laws, Rules, and Regulations (LRR’s). The role ensures compliance with applicable global LRR’s and internal policies and procedures to reduce exposure to financial loss, reputation harm or regulatory sanctions. The role will also have responsibility for the evaluation, mapping and alignment to common cloud industry standards.

Primary Responsibilities:

• The Cloud Governance role will be responsible for monitoring of the Compliance alert queue to ensure timely notifications are being met in accordance with the Laws Rules and Regulations that align to Cloud/Cloud Service Providers.
• The investigation/review of the Cloud Controls to understand impacted Controls and review of Cloud Inventory to ensure timely compliance to the LRR has occurred.
• The communication of new LRRs as the landscape of Cloud changes to management.
• Conducting assessments of current and new global regulatory requirements related to cloud, identifying gaps and providing recommended remediation actions.
• Development of appropriate mappings of bank and third party managed cloud controls to specific regulatory requirements.

Responsibilities:

• Leads and coordinates routines to support delivery of large programs, such as kick-offs, status reviews, stakeholder meetings, change controls, and tollgates
• Broadens relationships with business and technology leaders across multiple organizations, as well as Compliance and Risk
• Establishes target outcomes in partnership with stakeholders and leaders
• Tracks success metrics and provides status updates to stakeholders and leadership pertaining to the target outcomes, delivery, performance, risks, issues, and schedule
• Collaborates with sponsors and stakeholders to ensure that execution is aligned with deliverable requirements
• Manages program financials and supports resource planning
• Ensures adherence with Enterprise Change Management standards
• Enable the Bank's Cloud Strategy while maintaining compliance with policies, controls, and regulations, driving operational excellence and industry best practices for financial services cloud computing

Required Qualifications

• Competent in the interpretation of laws, rules, regulations (LRR’s)
• 5-10 years’ experience working in a compliance/regulatory setting
• Critical Thinking – Manage by Fact
• Ability to balance risks in ambiguous and complex situations
• Drive continual service improvement
• Excellent communication skills
• Experience in data protection and legal compliance
• Highly motivated to contribute and grow within a complex area of emerging importance

Desired Qualifications

• Knowledge of global and Asia Pacific regional cloud and third-party outsourcing regulations related to financial services firms.
• Knowledge of CSM – CCM/CAIQ and CRI - Cloud Profile 2.0
• Knowledge of Cloud Security Review Process and Permit to Send
• Knowledge of NIST(National Institute of Standards & Technology), Cloud related frameworks and regulations related BofA policies and standards
• Industry certifications such as CSA CCSK/CCAK, ISC2 CCSP, AWS/Microsoft/Google CSP specific cloud knowledge certifications

Desired Skills

• Collaboration
• Project Management
• Result Orientation
• Solution Delivery Process
• Stakeholder Management
• Analytical Thinking
• Business Acumen
• Financial Management
• Influence
• Risk Management
• Agile Practices
• Architecture
• Data Management
• Solution Design
• Technical Strategy Development