Business Controls Analyst - Information Security

Fifth Third Bank • Cincinnati, OH

2d • Onsite

About The Position

The Business Controls Analyst – Information Security serves as a first line of defense, conducting analysis to identify, assess, mitigate, and manage risks associated with changing laws, regulations, regulatory guidance, and stakeholder expectations. The role supports Business Controls in advancing risk management structures, processes, and tools within the organization’s Enterprise Risk Management (ERM) framework. It transforms data into business intelligence and monitors risks to support compliance and validate program effectiveness across assigned business or functional areas and Bancorp initiatives.

The analyst supports controls, policies, and procedures; provides risk expertise and analysis; investigates potential or actual operational losses; and gathers and reports risk data. The position also coordinates with business partners and the second and third lines of defense, supports regulatory change management and issue remediation, and contributes to risk assessment, indicator, scenario analysis, and product risk review programs. Additional projects may include new government or risk programs and matters related to acquisitions or strategic investments.

The role is based in Cincinnati, Ohio. Fifth Third states that the position is eligible for an incentive compensation plan and that employees have access to comprehensive benefits programs; specific benefit details are available through the company’s careers benefits page or a talent acquisition partner.

Requirements

• Bachelor’s degree or equivalent experience required; a related field is preferred.
• Professional verbal and written communication skills, including the ability to communicate discreetly when confidentiality is needed.
• Analytical ability and capacity to interpret and apply policies and regulations across a complex business.
• Ability to identify opportunities and build trusting strategic internal and external relationships and networks.
• Approachable and collaborative manner; ability to thrive in a fast-paced, dynamic environment and shift priorities quickly on short notice.
• Working knowledge of Microsoft Office products.
• Ability to work with minimal supervision.

Nice To Haves

• One to two years of experience in financial services, risk, business controls, or compliance is preferred.

Responsibilities

• Assist Business Controls leadership with implementing controls, policies, and procedures to improve effectiveness and efficiency in the assigned business or functional area.
• Provide stakeholders with expertise and analysis related to identifying, assessing, controlling, monitoring, testing, and reporting risks.
• Investigate and assist with root cause analysis for actual or potential operational losses.
• Gather, analyze, aggregate, and report risk data to develop solutions to analytical, implementation, or execution issues.
• Prepare status reports and presentations on milestones, alternatives, and potential risks for Business Controls leadership and internal partners.
• Develop knowledge of industry practices and regulations to support compliance with applicable laws, standards, and requirements, including OCC Heightened Standards.
• Support resolution of internal audit, compliance, or risk management issues that could affect the classification, availability, or integrity of data or processes.
• Identify control breakdowns, inadequate processes, and unexpected events, and implement corrective actions with Business Controls leadership.
• Build relationships with internal business control groups and second- and third-line partners, including Legal, Compliance, Enterprise Risk, and Audit.
• Collaborate with groups responsible for establishing information barriers and ensuring compliance with policies and processes that control information flow.
• Assist with regulatory change management, including identifying applicable changes, assessing them against business processes, reporting them, and supporting compliance.
• Partner with business managers on remediation actions under the Bancorp issues management framework and coordinate business ownership of processes, risks, controls, and tests.
• Assist with updates to archive systems such as Open Pages and PPM, as applicable.
• Help conduct facilitated RCSA sessions in which risks and controls are rated, as applicable.
• Assist with external change management for credit bureau work and build-out testing with the centralized team and Business Controls leadership, if applicable.
• Work with the line of business to identify initial inherent risks and controls and applicable governance processes.
• Assist in identifying loss events associated with RCSA risks and processes, and coordinate root cause analysis and action plan evaluation with the line of business.
• Partner with support functions or risk experts to identify applicable Enterprise and risk appetite indicators.
• Collaborate with the line of business on threshold evaluation and proposed changes, and enter proposed indicators and changes in the GRC tool.
• Actively participate in issue remediation.
• Execute the ERM Scenario Analysis risk management program.
• Develop and manage product inventory and execute the ERM product risk review program.
• Provide assistance with new government programs, special internal projects, new regulatory or ERM risk programs, and diligence, closing, or other matters relating to acquisitions and strategic investments, as assigned.

Benefits

• Comprehensive benefits programs designed to support employees’ and families’ physical, financial, emotional, and social well-being.
• Eligibility to participate in an incentive compensation plan, with payment based on company, line of business, and/or individual performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level