Business Risk and Control Manager - Deposits & Payments

Position Summary

The Business Risk & Controls Manager (BCM) serves as a trusted partner to the Business Unit, providing advisory support to senior management in establishing consistent, scalable risk management practices aligned to Enterprise standards. In partnership with the First Line of Defense, the BCM helps translate Enterprise risk frameworks into practical application – guiding adherence to risk and compliance requirements while enabling the business to operate efficiently and confidently.

Through this partnership model, the BCM strengthens the overall control environment, enhances risk transparency, and enables the Business Unit to make informed, risk‑aware decisions.

• Build relationships with all levels of leadership to effectively manage risk within the Business Unit.
• Work within the Enterprise Risk Management (ERM) Framework.
• Partner with Compliance, Risk Management, and Audit to liaise in communicating and supporting all risk and compliance‑based initiatives.
• Oversee business controls (including risk and control self‑assessments) and evaluate control effectiveness.
• Identify control gaps and facilitate timely remediation.
• Support internal and external audits, regulatory exams, while providing ongoing monitoring and insight to proactively manage risk exposures.
• Conduct control testing and reporting; monitor and report on control strengths.
• Maintain a library of process maps and a library of controls.
• Conduct Risk and Control Self‑Assessments (RCSAs) within the oversight of the ERM Framework.
• Formally document and monitor any issues identified, including entering those issues into the Issues Management System for remediation.
• Leverage risk assessment data and identify key data‑driven insights tied to the Business Unit.
• Identify and manage top and emerging risks that stem from business activities.
• Ensure risks associated with business activities are effectively identified, measured, monitored, and controlled.
• Follow written risk and compliance policies and procedures for business activities.
• Assist with translating control deficiencies into action plans and provide recommendations to enhance governance practices in alignment with risk and compliance frameworks.
• Ensure all departmental documents and activities are performed in compliance with applicable laws, regulations, policies and procedures as applicable to this position, including completion of required compliance training.
• Perform other duties and responsibilities as assigned.

• Expert knowledge in operational risk and controls execution in a medium to large financial institution.
• Excellent verbal and written communication skills.
• Ability to work independently in a changing environment with shifting priorities.
• Ability to manage multiple projects under stressed timelines.
• Ability to read and interpret documents such as procedure manuals, general business correspondence and/or journals or government regulations.
• Ability to read, analyze and interpret financial reports and/or legal documents.
• Ability to write routine reports, procedures and business correspondence; ability to write procedures.
• Ability to effectively present information in one‑on‑one and small group situations, to customers, clients and other employees in the organization.
• Ability to effectively present information in one‑on‑one and small group situations, to customers, senior management, and/or boards of directors.
• Strong leadership skills required to interact with more senior team members and executives.
• Understanding of enterprise, operational, and model risk related control frameworks and regulatory requirements.
• Critical thinking and excellent communication skills.
• Inquisitive nature, resourcefulness, and ability to seek out information.

• Bachelor’s degree in a business, risk, or related field, or equivalent experience.
• 6+ years of experience in operational risk, controls, or bank operations (10+ years in lieu of degree).
• Advanced degree preferred with relevant industry experience.

• Preferred experience with GRC platforms (Workiva, Metric Stream, RSA Archer) to manage risk and control documentation.
• Expert…