Business Control Manager – Technology Risk, Regulatory Engagement Lead

• Lead risk management activities supporting a technology division in a fast-paced environment
• Balance priorities, drive delivery, and execute with a focus on team success
• Partner across CIO teams within Global Technology and engage with senior technology leaders
• Lead a risk portfolio for designated Technology Executives by partnering with leaders and their teams
• Apply risk and technology expertise to identify, elevate, and mitigate compliance and operational risks
• Perform impact assessments, identify root causes, and support technology control activities
• Monitor issues through their lifecycle, including action plan development, validation, and approval reviews
• Communicate with senior internal and external stakeholders and collaborate across Technology, Operations, Audit, GCOR, and GIS
• Drive routines that promote a strong, sustainable risk culture across the technology team
• Ensure adherence to enterprise-wide standards and risk management practices
• Assess the design and effectiveness of the risk and control environment
• Perform monitoring and testing of controls; identify issues and control improvements for remediation
• Lead implementation of optimized controls and enhanced Quality Assurance practices
• Manage the performance and productivity of team members conducting quality inspection reviews
• Ensure timely execution of QA activities, including control execution, case management, and results reporting
• Manage and review front-line unit responses for regulatory exams, internal audits, and monitoring and inspection reviews
• Ensure data accuracy and capture relevant inspection metrics for governance dashboard reporting

• 5+ years of internal control, regulatory, audit, risk, compliance or relevant work experience within a financial services or technology organization
• 3+ years of professional domain expertise in a technical discipline, such as data management, artificial intelligence and/or information security
• Strong writing and communication skills; ability to communicate complex technical subject matter clearly to executives and junior analysts
• Ability to identify and perform thematic analysis
• Increasing levels of accountability and ownership
• Ability to advocate across diverse stakeholder groups as a change ambassador
• Strong relationship management and collaboration skills; ability to influence and motivate teams, stakeholders and peers
• Ability to analyze, simplify and collaborate to solve complex problems in ambiguous situations
• Strategic thinker, self-starter, organized, versatile, and capable of working with minimal management oversight
• Detail-oriented with ability to review documentation for accuracy and report risk review status
• Ability to coordinate and drive execution of priorities and meet deadlines in accordance with policies and standards
• Ability to understand complex issues and drive timely decisions
• Excellent facilitation and presentation skills
• Knowledge of technology domain disciplines
• Basic knowledge of MS Office 365 products, including Teams
• Bachelor's and/or Master's degree and/or relevant work experience (desired)
• Cybersecurity-related certification such as CISSP, CRISC, CISA, or CISM (desired)
• Prior operational risk or compliance experience in the technology arena (desired)
• Detailed bank-specific risk management and governance experience (desired)
• Ability to work with technical and non-technical business owners (desired)

Demonstrates expertise in risk management and compliance within technology environments, with a strong focus on communication, collaboration, and strategic execution. Capable of leading teams to enhance risk culture and ensure adherence to regulatory standards while driving operational improvements.

• Risk Management
• Regulatory Compliance
• Internal Control
• Data Management
• Cybersecurity Certification

• Risk Assessment
• Impact Assessment
• Control Testing
• Quality Assurance
• Thematic Analysis
• Documentation Review
• Governance Reporting
• Operational Risk Management
• Technology Control Activities
• Compliance Monitoring

• Strong Communication
• Relationship Management
• Collaboration
• Strategic Thinking
• Detail-Oriented

• CISSP
• CRISC
• CISA
• CISM

• Financial Services
• Technology Organization
• Audit
• Governance
• Operational Risk

• MS Office 365
• Teams