Business Control Manager - Governance and Risk Program Manager

Bank of America•Charlotte, NC

2d•Onsite

About The Position

This job is responsible for leading and executing on internal control discipline and operational excellence within a Line of Business (LOB) or Enterprise Control Function (ECF). Key responsibilities include executing LOB or ECF processes and tools to drive adherence to enterprise-wide standards. Job expectations include supporting the implementation of quality assurance and quality control processes within the LOB or ECF through ongoing monitoring and testing of controls, identifying issues and control improvements for remediation, and building out actions plans and milestones. The Governance & Risk Program Manager serves as the centralized coordinator for governance, audit, risk, and issue management activities across Enterprise & People Services. This role partners with business leaders, process owners, business controls, audit teams, and technology partners to ensure timely completion of regulatory, risk, audit, and remediation deliverables.

Requirements

7+ years of experience in governance, risk management, audit, controls, compliance, operational risk, business controls, or related program management functions.
Experience coordinating regulatory, internal audit, external audit, risk, or issue remediation activities within a complex organization.
Demonstrated experience managing issue remediation programs, including action plan tracking, governance routines, risk assessment, and closure validation.
Strong understanding of risk and control frameworks, issue management processes, and remediation governance.
Experience developing executive reporting, dashboards, and governance materials for senior leadership.
Proven ability to manage multiple workstreams simultaneously, establish priorities, and drive accountability across diverse stakeholder groups.
Strong analytical skills with experience identifying trends, root causes, control gaps, and opportunities for process improvement.
Experience partnering effectively with business leaders, technology teams, audit partners, risk functions, and control organizations.
Proven ability to navigate ambiguity and exercise sound judgment to drive decisions
Excellent written and verbal communication skills with the ability to translate complex risk, audit, and remediation information into concise executive-level messaging.
Advanced proficiency in Microsoft Excel, PowerPoint, and data visualization/reporting tools.

Nice To Haves

Financial services or other highly regulated industry experience.
Experience supporting Shared Services, Human Resources, Enterprise Services, Operations, Corporate Functions, or similar enterprise-wide support organizations.
Knowledge of internal control frameworks and methodologies, including risk assessments, control design, control testing, and remediation management.
Experience managing remediation efforts associated with technology risk, third-party risk, process risk, or regulatory findings.
Familiarity with issue management frameworks such as Regulatory Issues, Self-Identified Issues (SII), Risk-Identified Issues (RII), and control enhancement programs.
Experience supporting technology governance activities, including application remediation, third-party control assessments, or technology risk management processes.
Knowledge of audit lifecycle management, including audit planning, fieldwork, management responses, remediation validation, and closure processes.
Experience creating metrics and key risk indicators (KRIs) to support ongoing governance and risk oversight.
Demonstrated ability to influence without direct authority and build strong partnerships across multiple organizational levels.
Continuous improvement mindset with experience establishing governance routines, standardizing processes, and enhancing risk management practices.

Responsibilities

Leads the assessment of the design and effectiveness of the risk and control environment to support Client Operational Services and ensure adherence to enterprise-wide standards
Performs monitoring and testing of controls, identifying issues and control improvements for remediation
Leads the implementation of optimized controls and enhanced Quality Assurance (QA) practices to support business continuity efforts
Manages the performance and productivity of team members that conduct quality inspection reviews
Ensures timely execution of QA activities including control execution, case management, and results reporting
Manages and reviews all operations front line unit responses for regulatory exams, internal audits, and other monitoring and inspection reviews
Ensures accuracy of data and that relevant information is captured for inspection metrics to support governance for dashboard reporting
Coordinate all audit requests across Enterprise & People Services (E&PS) inclusive of developing audit response plans and timelines, tracking remediation commitments through closure, facilitating audit readiness reviews and preparing executive reporting for audits in flight.
Serve as the central coordinator for Issue (SII, RII) and Control Enhancement activities in partnership with Business Controls and process owners. Maintain issue inventories and remediation timelines, ensure compliance with documentation requirements and provide status reporting across E&PS.
Coordinate ADSF and TPCA remediation inclusive of tracking findings, managing action plans and remediation activities. Partner with TPEMs and technology owners to ensure deliverable timelines are met and maintain a central tracker for reporting.
Develop and maintain governance reporting and dashboards that provide visibility into audit activity, issues, control enhancements, remediation progress, key risks, and aging actions.
Monitor and assess audit findings, issue inventories, remediation plans, and control enhancement efforts to identify trends, recurring root causes, and opportunities for operational improvements