Business Control Manager- Technology Risk & Regulatory Lead

Bank of America•Charlotte, NC

3d•Onsite

About The Position

At Bank of America, this role leads and executes the internal control discipline and operational excellence for a Line of Business or Enterprise Control Function, driving adherence to enterprise-wide standards. The position supports the implementation of quality assurance and quality control through ongoing monitoring and testing, issue identification, control improvements, remediation action plans, and milestones. Within Global Technology Risk Management, the role drives risk management activities in support of GMT’s Emerging Technology and COO leaders. It supports risk tied to emerging technology areas such as GenAI platforms, including Orchestra, and Digital Assets, as well as Application Governance activities that support timely completion of compliance requirements. The role partners with technology leadership and teams to promote risk identification, escalation, and timely mitigation of compliance and operational risks. The role applies risk and technology expertise to conduct impact assessments, identify root causes, support technology control activities, and reduce risk across an assigned portfolio. It monitors issues through their lifecycle, including action plan development and validation through approval reviews, and tracks key risk metrics and root causes of underperformance. The position works with stakeholders across Technology, Operations, Audit, GCOR, GIS, and other organizations, and supports CIO Key Risk Reviews, Issue Management routines, Risk Framework activities, Quality Assurance, Technology Risk Assessments, and exam engagements. The role is based at one of the listed New Jersey locations and is part of the bank’s in-office culture, with role-specific attendance requirements and an appropriate level of flexibility. It is a first-shift position with a 40-hour workweek. The annual salary range is $125,000 to $178,700, with offers based on experience, education, and skill set. The role is eligible for an annual discretionary incentive plan and benefits, including access to paid time off and employee support resources.

Requirements

At least 5 years of internal control, regulatory, audit, risk, compliance, or relevant work experience within a financial services or technology organization.
At least 3 years of professional domain expertise in a technical discipline such as data management, artificial intelligence, or information security.
Ability to explain complex technical subject matter clearly and concisely to audiences ranging from executives to junior analysts.
Strong writing and communication skills to convey outcomes to stakeholders.
Ability to identify patterns and perform thematic analysis.
Demonstrated increasing levels of accountability and ownership.
Ability to advocate for change across diverse stakeholder groups.
Strong relationship management and collaboration skills, including the ability to influence and motivate teams, stakeholders, and peers to build consensus and solve problems.
Comfort with ambiguity and ability to analyze, simplify, and collaborate to solve complex problems.
Strategic, self-starting, organized, and versatile, with the ability to work with minimal management oversight.
Attention to detail and ability to review documentation for accuracy and report on risk review status.
Ability to coordinate and drive priorities to completion and meet deadlines in accordance with policies and standards.
Ability to understand complex issues, make timely decisions, and know when to seek input or act independently.
Excellent facilitation and presentation skills.
Basic knowledge of Microsoft Office 365 products.
Knowledge of one or more technology domain disciplines.

Nice To Haves

Bachelor’s degree, master’s degree, and/or relevant work experience.
Cybersecurity-related certification such as CISSP, CRISC, or CISA, CISM, or similar.
Prior operational risk or compliance experience in the technology arena.
Detailed bank-specific risk management and governance experience.

Responsibilities

Lead assessment of the design and effectiveness of the risk and control environment and ensure adherence to enterprise-wide standards.
Perform monitoring and testing of controls, identify issues, and recommend control improvements for remediation.
Lead implementation of optimized controls and enhanced Quality Assurance practices to support business continuity.
Manage the performance and productivity of team members conducting quality inspection reviews.
Ensure timely execution of Quality Assurance activities, including control execution, case management, and results reporting.
Manage and review operations front-line unit responses for regulatory exams, internal audits, and other monitoring and inspection reviews.
Ensure data accuracy and capture relevant information for inspection metrics used in governance and dashboard reporting.
Partner with technology leaders and teams to identify, escalate, and mitigate compliance and operational risks.
Conduct impact assessments, identify root causes, and drive risk reduction across the assigned portfolio.
Monitor issues through their lifecycle, including action plan development and validation through approval reviews.
Monitor key risk metrics and help identify root causes of non-performance.
Collaborate with stakeholders across Technology, Operations, Audit, GCOR, GIS, and other organizations to improve controls and reduce risk.
Drive or support CIO Key Risk Reviews, Issue Management routines, Risk Framework support, Quality Assurance, Technology Risk Assessments, and exam engagements.
Communicate effectively with senior internal and external constituents and stakeholders.
Coordinate priorities and execution to meet deadlines and adhere to policies and standards.