Business Control Manager- Technology Risk & Regulatory Lead

Bank of America • Jersey City, NJ

4d • $125,000 - $178,700 • Onsite

About The Position

At Bank of America, the Business Control Manager leads and executes internal control discipline and operational excellence within a Line of Business or Enterprise Control Function. The role applies enterprise-wide processes and standards, supports ongoing monitoring and control testing, identifies issues and control improvements, and develops remediation plans and milestones.

Within Global Technology Risk Management, the role drives risk management activities in support of GMT’s Emerging Technology and COO leaders. It supports risk work involving emerging areas such as GenAI platforms, including Orchestra, and Digital Assets, while also assisting the GMT COO with effective and efficient Application Governance and timely completion of compliance activities. The position works with peers across Global Technology CIO teams and provides exposure to technology senior leaders.

The role partners with technology leadership to promote risk identification, escalation, and timely mitigation of compliance and operational risks. It applies risk and technology expertise to impact assessments, root-cause analysis, and technology control activities, and monitors issues throughout their lifecycle, including action plan development and validation through approval reviews. It also monitors key risk metrics and helps identify causes of non-performance.

The position collaborates with stakeholders across Technology, Operations, Audit, GCOR, GIS, and other organizations to improve controls and reduce risk. It supports risk routines and adherence to enterprise standards, including CIO Key Risk Reviews, Issue Management routines, Risk Framework support, Quality Assurance, Technology Risk Assessments, and Exam Engagement support. Responsibilities also include managing team performance and productivity for quality inspection reviews, ensuring timely QA execution and accurate inspection data for governance and dashboard reporting.

Requirements

• At least 5 years of internal control, regulatory, audit, risk, compliance, or relevant work experience within a financial services or technology organization.
• At least 3 years of professional domain expertise in a technical discipline such as data management, artificial intelligence, or information security.
• Ability to communicate complex technical subject matter clearly and concisely to audiences ranging from executives to junior analysts.
• Strong writing and communication skills to convey outcomes to stakeholders.
• Ability to identify patterns and perform thematic analysis.
• Demonstrated increasing levels of accountability and ownership.
• Ability to advocate for change across diverse stakeholder groups.
• Strong relationship management and collaboration skills, including the ability to influence and motivate teams, stakeholders, and peers to build consensus and solve problems.
• Comfort analyzing, simplifying, and collaboratively solving complex problems in ambiguous situations.
• Strategic, self-starting, organized, versatile, and able to work with minimal management oversight.
• Detail-oriented, with the ability to review documentation for accuracy and report on risk review status.
• Ability to coordinate and drive priorities and meet deadlines in accordance with policies and standards.
• Ability to understand complex issues, make timely decisions, and know when to seek additional input or act independently.
• Excellent facilitation and presentation skills.
• Knowledge of technology domain disciplines.
• Basic knowledge of Microsoft Office 365 products.

Nice To Haves

• Bachelor’s degree, Master’s degree, and/or relevant work experience.
• Cybersecurity-related certification such as CISSP, CRISC, CISA, CISM, or similar.
• Prior operational risk or compliance experience in the technology arena.
• Detailed bank-specific risk management and governance experience.
• Ability to work with technical and non-technical business owners.

Responsibilities

• Lead assessment of the design and effectiveness of the risk and control environment to support Client Operational Services and adherence to enterprise-wide standards.
• Perform monitoring and testing of controls, identify issues, and identify control improvements for remediation.
• Lead implementation of optimized controls and enhanced Quality Assurance practices to support business continuity efforts.
• Manage the performance and productivity of team members conducting quality inspection reviews.
• Ensure timely execution of QA activities, including control execution, case management, and results reporting.
• Manage and review operations front line unit responses for regulatory exams, internal audits, and other monitoring and inspection reviews.
• Ensure data accuracy and capture relevant information for inspection metrics used in governance dashboard reporting.
• Partner with technology leadership and teams to identify, escalate, and mitigate compliance and operational risks.
• Conduct impact assessments and root-cause analysis in support of technology control activities and risk reduction.
• Monitor the health of issues throughout their lifecycle, including action plan development and validation through approval reviews.
• Monitor key risk metrics and help identify root causes of non-performance.
• Collaborate with Technology, Operations, Audit, GCOR, GIS, and other stakeholders to improve controls and reduce risk.
• Support CIO Key Risk Reviews, Issue Management routines, Risk Framework activities, Quality Assurance, Technology Risk Assessments, and Exam Engagements.
• Communicate complex technical matters clearly to audiences ranging from executives to junior analysts.
• Coordinate and drive execution of priorities and deadlines in accordance with policies and standards.

Benefits

• Industry-leading benefits.
• Access to paid time off.
• Resources and support for employees.
• Eligibility to participate in the annual discretionary incentive plan, with awards based on individual performance and behaviors, line of business or group contributions, and overall company success.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed