Business Control Manager - Governance and Risk Program Manager

Bank of America•Charlotte, NC

About The Position

At Bank of America, the Business Control Manager leads and executes the internal control discipline and operational excellence within a Line of Business or Enterprise Control Function. The role applies enterprise-wide processes and tools, supports quality assurance and quality control through ongoing monitoring and control testing, identifies issues and control improvements, and builds remediation action plans and milestones. The Governance & Risk Program Manager serves as the centralized coordinator for governance, audit, risk, and issue management activities across Enterprise & People Services. The position partners with business leaders, process owners, business controls, audit teams, and technology partners to ensure timely completion of regulatory, risk, audit, and remediation deliverables. Responsibilities include coordinating audit responses and issue remediation, maintaining inventories and timelines, producing governance reporting and dashboards, and identifying trends and opportunities for operational improvement. Bank of America describes its workplace approach as an in-office culture, with flexibility based on role-specific responsibilities and business needs. Internal employees currently working from home may apply, but selected candidates may be required to work onsite under the workplace excellence policy.

Requirements

At least 7 years of experience in governance, risk management, audit, controls, compliance, operational risk, business controls, or related program management functions.
Experience coordinating regulatory, internal audit, external audit, risk, or issue remediation activities within a complex organization.
Demonstrated experience managing issue remediation programs, including action plan tracking, governance routines, risk assessment, and closure validation.
Strong understanding of risk and control frameworks, issue management processes, and remediation governance.
Experience developing executive reporting, dashboards, and governance materials for senior leadership.
Ability to manage multiple workstreams, set priorities, and drive accountability across diverse stakeholder groups.
Strong analytical skills, including identifying trends, root causes, control gaps, and process improvement opportunities.
Experience partnering with business leaders, technology teams, audit partners, risk functions, and control organizations.
Ability to navigate ambiguity and exercise sound judgment to drive decisions.
Excellent written and verbal communication skills, including translating complex risk, audit, and remediation information into concise executive-level messaging.
Advanced proficiency in Microsoft Excel, PowerPoint, and data visualization or reporting tools.

Nice To Haves

Financial services or other highly regulated industry experience.
Experience supporting Shared Services, Human Resources, Enterprise Services, Operations, Corporate Functions, or similar enterprise-wide support organizations.
Knowledge of internal control frameworks and methodologies, including risk assessments, control design, control testing, and remediation management.
Experience managing remediation efforts associated with technology risk, third-party risk, process risk, or regulatory findings.
Familiarity with issue management frameworks such as Regulatory Issues, Self-Identified Issues (SII), Risk-Identified Issues (RII), and control enhancement programs.
Experience supporting technology governance activities, including application remediation, third-party control assessments, or technology risk management processes.
Knowledge of audit lifecycle management, including audit planning, fieldwork, management responses, remediation validation, and closure processes.
Experience creating metrics and key risk indicators (KRIs) for ongoing governance and risk oversight.
Ability to influence without direct authority and build partnerships across multiple organizational levels.
Continuous improvement mindset, with experience establishing governance routines, standardizing processes, and enhancing risk management practices.

Responsibilities

Lead assessment of the design and effectiveness of the risk and control environment to support Client Operational Services and adherence to enterprise-wide standards.
Monitor and test controls, identify issues, and identify control improvements for remediation.
Lead implementation of optimized controls and enhanced Quality Assurance practices to support business continuity.
Manage the performance and productivity of team members conducting quality inspection reviews.
Ensure timely execution of QA activities, including control execution, case management, and results reporting.
Manage and review operations front line unit responses for regulatory exams, internal audits, and other monitoring and inspection reviews.
Ensure data accuracy and capture relevant information for inspection metrics used in governance dashboard reporting.
Coordinate audit requests across Enterprise & People Services, develop audit response plans and timelines, track remediation commitments through closure, facilitate audit readiness reviews, and prepare executive reporting for audits in flight.
Coordinate Issue (SII, RII) and Control Enhancement activities with Business Controls and process owners; maintain issue inventories and remediation timelines, ensure documentation compliance, and provide status reporting across E&PS.
Coordinate ADSF and TPCA remediation, including tracking findings, managing action plans and remediation activities, partnering with TPEMs and technology owners to meet deliverable timelines, and maintaining a central reporting tracker.
Develop and maintain governance reporting and dashboards showing audit activity, issues, control enhancements, remediation progress, key risks, and aging actions.
Monitor and assess audit findings, issue inventories, remediation plans, and control enhancement efforts to identify trends, recurring root causes, and operational improvement opportunities.