Business Control Manager , NY San Francisco, CA

Chicago, IL, USA;
New York, NY, USA;
San Francisco, CA, USA

We are hiring a Business Control Manager to join our Compliance team at Chime, where you will be responsible for strengthening the first line of defense by partnering with business units to ensure they operate in compliance with all applicable regulatory requirements and internal policies. You will own the control environment for an assigned Business Unit (identifying risks, designing controls with the business, and validating that those controls work) and contribute to the compliance and control frameworks the Business Control Management team is building.

As a key player in our compliance team, you will support various departments, including product, engineering, legal, and operations, to ensure our business practices align with regulatory standards and best practices.

The Business Control Manager will work across product, engineering, legal, and operations, and you will monitor how regulatory change affects the controls in your domain as Chime continues to scale. This role offers the chance to build the control environment for a fast-moving product area from the ground up, at a company that values innovation and consumer protection.

The base salary offered for this role and level of experience will begin at $ and up to $. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience.

• Own the control environment for your assigned business unit - maintain the control library, keep control records current, and drive enhancements as products and processes change.
• Evaluate new products, features, and material process changes for regulatory risk before launch - reviewing business requirements early in scoping, identifying regulatory touchpoints, and proposing control designs and residual risk summaries.
• Run proactive reviews of existing processes and control environments - full risk identification, severity assessment, control gap analysis, and control maturity evaluation
• Map identified risks to the specific regulatory obligations they implicate, and maintain risk, obligation, and control records in our GRC platform so that coverage and gaps are visible and auditable.
• Design preventive, detective, and directive controls with the Engineering or Product owner who will build them - agreeing control type, frequency, automation level, and the evidence the control must produce - then validate after implementation that the control is operating as designed and the gap is closed.
• Own the compliance control workstream for incidents in your business unit: perform gap analysis from the root cause analysis, identify the control gap and the obligation it affects, design the control with the Engineering or Product owner, track implementation against SLA, validate the control once live, and close the compliance issue.
• Classify control gaps by root cause and use that data to surface systemic weaknesses - recurring patterns within your business unit and across business units - and turn them into recommendations that go beyond any individual control.
• Translate regulatory change in your business unit into control impact - working with Regulatory Affairs and Compliance Advisory to assess what a change means for existing controls, and advising the business on the adjustments required.
• Perform ongoing reviews of business procedures, member-facing disclosures, marketing, and complaint data to identify compliance risks, and partner with stakeholders on corrective action.
• Build durable working relationships with product, engineering, legal, and operations partners, and support…