Senior Associate, Business Controls

Senior Associate of Business Controls

When you join Sallie Mae, you become a champion for all students. We're on a mission to power confidence as students begin their unique journey. To help them plan their higher education, successfully finish, and prepare for life after school. To help them Start smart. Learn big. Students need guidance navigating this important time in their life. They need someone who acknowledges that their education path is unique.

They need a partner willing to evolve and not only meet but surpass their expectations. We're changing. Because students need a better way. We're looking for people who are excited to drive this transformation. To break barriers and think of new ways to adapt, help, and create better experiences for students—and for each other. This is where diverse backgrounds, beliefs, and perspectives matter.

It's where you're empowered to bring your authentic self to work. Feeling your best allows you to do your best. Our benefits take care of the whole you—from physical and mental to financial and professional. You'll get opportunities to further your education and career, support for you and your family (including your pets!), paid time off to volunteer for the things that matter to you, and more.

We're obsessed with impact and making a real difference. For us, that means putting relationships first, asking "why not?" when tackling challenges, and continuously learning new skills. Come do more than join something, change something. For students, for future generations, for the future of education.

The Senior Associate of Business Controls role is part of the Business Controls Office and is responsible for governance, risk and compliance (GRC) activities for the Technology and Enablement organization. A key responsibility of the position is serving as the liaison between the Internal Audit and First Line of Defense technology and security teams. In this capacity, the individual will monitor audit scope, provide guidance on audit expectations and processes, support prioritization of audit-related activities, and coordinate the collection and secure submission of requested evidence.

Internal Audits and Audit Special Projects are conducted year-round, so this will be a continuous responsibility. This role also includes oversight of issue remediation activities, ensuring that monthly status updates are captured for all issues within the Chief Technology and Enablement Officer's organization. The incumbent will support teams in navigating the issue management and operational event life cycles, including timely issue and event creation within the GRC system.

In addition, this individual will support the external SOX audit by partnering with stakeholders to gather and provide evidence for General IT Controls and application controls testing. Responsibilities also include contributing to other SOX-related activities, such as the review and evaluation of SOC Reports. The individual in this role will own the development of creating reports and dashboards that are generated for monthly management reporting.

They will be responsible for ensuring data accuracy, consistency, and relevance. Finally, this role will contribute to the preparation for the IT regulatory examinations (e.g. FDIC/UDFI), including the coordination, collection and review of requested artifacts and the development of materials to support impacted teams.

Minimum:
Indicate minimum education, skills and experience required.

• Bachelor's Degree
• 4+ years of experience working in an audit, risk management and compliance field
• Strong analytical and problem-solving skills
• Must be a self-starter, capable of focused research, collection, and analysis of information
• Ability to work both independently and in a team setting
• Leadership, teamwork, organization and time management skills are critical.
• Must be focused, energetic, willing to take ownership, and have a high-level of integrity
• Ability to clearly communicate with staff at all levels of the organization and maintain effective working relationships across the organization and with external parties
• Must be able to follow instructions and execute tasks independently
• Experience in building reports for Management
• Broad to advanced knowledge of computer applications such as Microsoft Excel, Word, Visio, PowerPoint, etc.

Preferred:
Indicate "nice to haves" regarding education, skills, and experience.

• Experience and knowledge of working within a GRC system
• Certifications such as CIA, CISA, CISSP, CRISC, CISM, CCSK, etc.