Business Risk Control Officer

Business Risk Control Officer

The Business Risk Control Officer at a midsize bank is responsible for overseeing risk, compliance, and operational control frameworks to ensure regulatory adherence and financial stability. Key responsibilities include conducting risk assessments, monitoring business activities, and enhancing internal controls. The role collaborates closely with business units, audit teams, and senior management to mitigate risk and drive process improvements, while fostering a strong control environment. Additionally, the officer engages with stakeholders to support business performance, compliance, and operational efficiency, in alignment with the bank's goals and risk appetite.

The position exercises a high level of independent judgment and decision-making in areas that directly impact the bank's operational integrity, risk exposure, and strategic business objectives.

Principal Duties & Responsibilities:

• Ensure operational risk events and complaints are promptly captured, documented, and reported through the appropriate risk systems.
• Independently review and analyze operational risk events above a defined threshold that impact or originate from the line of business; identify root causes, document findings, and support the development of corrective action plans. Where applicable, record material control deficiencies in the system of record.
• Map operational risk events and complaints related to control deficiencies to impacted controls in the risk and control self-assessment; reassess residual risk levels and escalate when residual risk exceeds the bank's risk appetite.
• Evaluate external events to assess relevance to the line of business and recommend control enhancements or additions when needed to mitigate similar risks.
• Monitor and communicate the status of risk and control self-assessments to the supported line of business, identifying risks outside of appetite, new or open issues, and changes in risk exposure.
• Maintain an accurate and updated inventory of business processes executed by the assigned line of business and ensure those processes are properly reflected in the risk and control self-assessment and associated system of record.
• Track risks related to line of business products, services, and processes; identify inherent risks and monitor internal or external changes that may affect the risk profile.
• Collaborate with product and service owners to assess risk in new or modified offerings; ensure appropriate controls are identified and incorporated into the risk and control self-assessment.
• Engage with risk subject matter experts to validate risks and controls associated with line of business activities.
• Assess documentation and control coverage for models, vendors, tools, and applications used by the line of business by collaborating with model risk management, third party risk management, and technology teams to ensure appropriate inclusion and alignment within risk frameworks.
• Ensure controls mitigating line of business risks are accurately documented and evaluated for design and effectiveness, including key control designation, in alignment with the controls standard.
• Independently review risk and control self-assessment control testing results provided by the first line of defense QA team for completeness and adherence to control testing standards; identify any gaps or inconsistencies and escalate or follow up as needed.
• Conduct quality assurance checks related to control testing, by verifying that required elements meet applicable standards, and escalate findings or inconsistencies for resolution as needed.
• Monitor control performance data to ensure controls are functioning as intended and identify any gaps or weaknesses requiring remediation.
• Serve as the issues management coordinator for the line of business, ensuring consistent issue documentation, SLA tracking, and timely escalation through designated risk systems, while collaborating with appropriate subject matter experts to support resolution efforts.
• Collaborate with issue sources to identify finding owners, confirm severity ratings, and map issues to corresponding risk and control self-assessment controls.
• Perform quality control on issues owned by the supported line of business to confirm accuracy, completeness, and proper classification.
• Reassess residual risks when issues impact controls, ensuring accurate risk reflection and working with stakeholders to determine if mitigation is required when risk exceeds appetite.

Qualifications

• 5-7 years experience in risk management, internal controls, compliance, or business operations within the banking or financial services industry.
• Knowledge of banking regulations, risk management frameworks, financial reporting, and control methodologies.
• Familiarity with banking systems, risk management software, and data analytics tools.
• Ability to apply critical thinking to identify the strengths and weaknesses and propose effective solutions to control weaknesses.
• Excellent verbal and written communication skills to engage with stakeholders at all levels.
• High level of accuracy in risk assessment and compliance monitoring.
• High reasoning skills including the ability to define problems, collect data, establish facts, and draw valid conclusions.
• Ability to read, comprehend, analyze, and interpret legal documents, governmental regulations, and professional publications.

Education

• Bachelor's degree in business, finance, business administration, risk management or related field.

Special Instructions to Candidates

• Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.
• Reasonable accommodation may be made to assist individuals with disabilities to complete the online application process.