Associate, Business Control & Risk Management

It Starts Here

Santander is a global leader and innovator in the financial services industry and is evolving from a high‑impact brand into a technology‑driven organization. Our people are at the heart of this journey and together, we are driving a customer‑centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible. This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference.

If you are interested in exploring the possibilities We Want to Talk to You!

The Associate, Business Control & Risk Management operates within the First Line of Defense and is accountable to assist the Business Control & Risk Management team in driving effective and consistent business line execution against the Enterprise Risk Management Framework. Specifically, the Associate works to identify, assess key risks and control effectiveness throughout the assigned business line by driving business unit adherence with applicable risk frameworks, Corporate/Business Line policies and standards.

The incumbent will also assist with completion of business line risk initiatives, as assigned, such as risk assessments, KRI/KPI development and monitoring, and on‑time remediation of issues. The Associate must be able to effectively partner with various stakeholders.

• Drive Risk Culture:
  Ensure awareness in the Business Line of risk frameworks, policies and standards.
• Communication & Training:
  Work with team members and key stakeholders to develop appropriate metrics and deliver relevant and accurate data. Work with internal teams to gain an in‑depth understanding of existing risks, causes, severity rating, controls and remediation. Maintain two‑way communications with SLoD. Facilitate training for Business Lines to provide awareness of risk frameworks, policies, programs, processes, etc.
• Adherence to Risk Frameworks, Policies, and Standards:
  Partner with SLoD to provide input/review of frameworks, policies and standards. Facilitate Business Line awareness of and adherence to risk frameworks, policies, and standards and issue validation. Report and elevate exceptions and facilitate Business Line corrective actions.
• Continuously monitor all sources of risk existing within the Business Line and externally. Engage in research, peer networking, and experience to anticipate critical risk issues impacting the Business Line. Understand where operational, strategic, reputational, compliance, and model risks exist in the Business Line and continually assess and improve controls to mitigate those risks. Monitor Key Risk Indicators and report on negative/adverse trends in Business Line.
  
  Monitor risk profile to maintain tolerance within Risk Appetite.
• Issue Identification, Management, and Risk Assessment:
  Conduct RCSA responsibilities including Process Mapping, Risk & Control Matrices, Inherent Risk Assessments, Internal Control testing and Heracles data/input. Engage and hold Business Line process owners accountable to identify and assess risks. Support Business Lines in risk identification (e.g., NPBA, change management, etc.) Ensure all issues (Self‑Identified, IA, Credit Risk Review or Regulatory) pertaining to the Business Line are resolved within established timelines.
  
  Validate issues to ensure Business Line remediation is sufficient to address root cause and prevent recurrence.
• Internal Control Testing:
  Implement and maintain internal control testing and control effectiveness monitoring in the Business Line. Validate the adequacy of controls, elevate deficiencies as appropriate. Identify root causes of control deficiencies/weaknesses and take appropriate action to ensure Business Lines remediate and prevent recurrence.
• Exam Management:
  Liaison with the Business Line for all exam related activities including regulatory, Internal Audit and Credit Risk Review. Review materials, responses and validate Business Line remediation work (e.g., artifacts, action plans, etc.).

Support the implementation of Key Risk Indicator (KRI) framework:
Formally define and document metric definition details (metric type, provider, approver,…