Business Risk Control Officer

Business Risk Control Officer

The Business Risk Control Officer at a midsize bank is responsible for overseeing risk, compliance, and operational control frameworks to ensure regulatory adherence and financial stability. Key responsibilities include conducting risk assessments, monitoring business activities, and enhancing internal controls. The role collaborates closely with business units, audit teams, and senior management to mitigate risk and drive process improvements, while fostering a strong control environment. Additionally, the officer engages with stakeholders to support business performance, compliance, and operational efficiency, in alignment with the bank's goals and risk appetite.

The position exercises a high level of independent judgment and decision-making in areas that directly impact the bank's operational integrity, risk exposure, and strategic business objectives.

Principal Duties & Responsibilities :

• Ensure operational risk events and complaints are promptly captured, documented, and reported through the appropriate risk systems.
• Independently review and analyze operational risk events above a defined threshold that impact or originate from the line of business; identify root causes, document findings, and support the development of corrective action plans. Where applicable, record material control deficiencies in the system of record.
• Map operational risk events and complaints related to control deficiencies to impacted controls in the risk and control self-assessment; reassess residual risk levels and escalate when residual risk exceeds the bank's risk appetite.
• Evaluate external events to assess relevance to the line of business and recommend control enhancements or additions when needed to mitigate similar risks.
• Monitor and communicate the status of risk and control self-assessments to the supported line of business, identifying risks outside of appetite, new or open issues, and changes in risk exposure.
• Maintain an accurate and updated inventory of business processes executed by the assigned line of business and ensure those processes are properly reflected in the risk and control self-assessment and associated system of record.
• Track risks related to line of business products, services, and processes; identify inherent risks and monitor internal or external changes that may affect the risk profile.
• Collaborate with product and service owners to assess risk in new or modified offerings; ensure appropriate controls are identified and incorporated into the risk and control self-assessment.
• Engage with risk subject matter experts to validate risks and controls associated with line of business activities.
• Assess documentation and control coverage for models, vendors, tools, and applications used by the line of business by collaborating with model risk management, third party risk management, and technology teams to ensure appropriate inclusion and alignment within risk frameworks.
• Ensure controls mitigating line of business risks are accurately documented and evaluated for design and effectiveness, including key control designation, in alignment with the controls standard.
• Independently review risk and control self-assessment control testing results provided by the first line of defense QA team for completeness and adherence to control testing standards; identify any gaps or inconsistencies and escalate or follow up as needed.
• Conduct quality assurance checks related to control testing, by verifying that required elements meet applicable standards, and escalate findings or inconsistencies for resolution as needed.
• Monitor control performance data to ensure controls are functioning as intended and identify any gaps or weaknesses requiring remediation.
• Serve as the issues management coordinator for the line of business, ensuring consistent issue documentation, SLA tracking, and timely escalation through designated risk systems, while collaborating with appropriate subject matter experts to support resolution efforts.
• Collaborate with issue sources to identify finding owners, confirm severity ratings, and map issues to corresponding risk and control self-assessment controls.
• Perform quality control on issues owned by the supported line of business to confirm accuracy, completeness, and proper classification.
• Reassess residual risks when issues impact controls, ensuring accurate risk reflection and working with stakeholders to determine if mitigation is required when risk exceeds appetite.

Qualifications

Education

Special Instructions to Candidates