Business Control Manager

The Business Control Manager (BCM) equips the business with the risk expertise and resource capability to meet the Company's goal of managing risks, complying with regulatory requirements, and meeting contractual obligations. The BCM continuously assesses and improves the business control environment to ensure its risk management capability. In coordination with Business Function leaders, the BCM is responsible and accountable for managing the business functions’ overall control environment.

Responsibilities

• Manages, mentors, trains, and evaluates a team of Business Control Analysts
• Drives the continuous improvement of business control performance and risk mitigation through the on-going RCSA program execution
• Assesses inherent risks of business operations and evaluates the effectiveness of controls
• Proactively identifies control deficiencies
• Continuously updates control ratings as changes occur, or due to new issues, closed issues, or new processes
• Performs continuous monitoring of new issues, Quality Assurance, Quality Control, and Compliance testing to determine underlying control deficiencies / breakdowns
• Links new issues to controls to determine impact to residual risk
• Timely evaluates controls linked to compliance requirements
• Updates the Company's risk system of record
• Maintains the business risk and control profile leveraging the RCSA process to ensure new process changes, regulatory changes, and technology changes are updated appropriately and timely
• Facilitates continuous RCSA reassessment and attestation (subject to Inherent Risk Rating, IRR)
• Assists in the creation of effective Management Action Plans (MAPs) to remediate issues
• Works with Issue Management team and business to perform root cause analysis of new issues
• Works with Issue Management team in the evaluation of new issues to determine business response based on business risk appetite and the Company's Issue Management guidelines
• Reviews and validates remediation MAP activities to ensure they address root cause of open issues or linkage to pre-existing MAPs when appropriate
• Prepares and processes Risk Acceptance requests
• Ensures controls for closed issues successfully pass AVT Validations and Sustainability; Demonstrates improved controls as a result of closed issues
• Identifies and escalates emerging risks
• Provides control design advice and change management in response to changes in business process, technology, or compliance requirements
• Enhances risk awareness within the business function
• Timely responds to Client requests (Client Audit Support / Client Management)
• Active engagement with internal / external risk stakeholders (Audit, Compliance, Regulatory Change Management, Enterprise Change Management, Issues Management, Oversight & Control, QA / QC, P&P, AVT)
• Liaises with the Company's Policies and Procedures (P&P) team to ensure risks and controls are appropriately reflected within department procedures, Business Function Procedures (BFPs)
• Liaises with Internal Audit and Exam Management to satisfy any requests for risk and control information during audits and examinations; Coordinates management responses into MAPs for submission to auditors and examiners
• Liaises with testing partners (QA, QC, Compliance) to analyze root cause of testing results and suggest remediation activity
• Liaises with Audit validation team to satisfy evidence requests for validating remediated issues; Coordinates business walkthroughs and any subsequent updates in Process Unity, as appropriate
• Assist the Business Control Director (BCD) and Issue Management team as assigned
• Appropriately assess risk when business decisions are made, include but not limited to compliance and operational risk. Demonstrate consideration for the Company's reputation as well as our clients, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards

Technology