Business Controls Analyst - Information Security

Fifth Third Bank • Cincinnati, OH

15h

About The Position

The Business Controls Analyst – Information Security serves as a first line of defense, analyzing risks and supporting compliance with laws, regulations, regulatory guidance, and stakeholder expectations. The role supports the development of risk-management structures, processes, and tools under the organization’s Enterprise Risk Management (ERM) framework, and translates data into business intelligence for stakeholders. It monitors and manages risks within an assigned line of business or functional area and Bancorp initiatives, supporting compliance and validation of program effectiveness.

The analyst helps implement controls, policies, and procedures; identifies, assesses, monitors, tests, and reports on risks; investigates potential operational losses; and supports issue remediation and regulatory change management. The role works with business managers and internal partners, including Legal, Compliance, Enterprise Risk, and Audit, to address deficiencies, maintain appropriate information barriers, and manage processes, risks, controls, and tests. Additional work may include RCSA sessions, risk indicators, ERM scenario analysis, product risk reviews, and special projects assigned by leadership.

Requirements

• Bachelor’s degree or equivalent experience required; a related field is preferred.
• Professional verbal and written communication skills, including discretion and understanding when confidentiality is needed.
• Analytical ability and capacity to interpret and apply policies and regulations across a complex business.
• Ability to identify opportunities and build trusting strategic internal and external relationships and networks.
• Approachable and collaborative, able to thrive in a fast-paced dynamic environment and shift priorities on short notice.
• Working knowledge of Microsoft Office products.
• Ability to work with minimal supervision.

Nice To Haves

• 1–2 years of financial services industry, risk, business controls, or compliance experience preferred.

Responsibilities

• Assist Business Controls leadership with implementing controls, policies, and procedures to improve effectiveness and efficiency.
• Provide expertise and analysis for identifying, assessing, controlling, monitoring, testing, and reporting risks.
• Investigate actual or potential operational losses and assist with root cause analysis.
• Gather, analyze, aggregate, and report risk data, developing solutions to analytical, implementation, or execution issues.
• Prepare status reports and presentations on milestones, alternatives, and potential risks for Business Controls leadership and internal partners.
• Develop knowledge of industry practices and regulations, including OCC Heightened Standards, to support compliance.
• Support resolution of internal audit, compliance, or risk-management issues that could affect data or process classification, availability, or integrity.
• Identify control breakdowns, inadequate processes, and unexpected events; implement corrective actions with Business Controls leadership.
• Build relationships with internal business control groups and second- and third-line partners such as Legal, Compliance, Enterprise Risk, and Audit.
• Collaborate with groups responsible for information barriers and compliance with policies and processes governing information flow.
• Assist with regulatory change management by identifying applicable changes, assessing impacts on business processes, reporting, and supporting compliance.
• Partner with business managers to implement remediation actions under the Bancorp issues management framework and coordinate ownership of processes, risks, controls, and tests.
• Assist with updates to archive systems such as Open Pages and PPM, when needed.
• Assist with facilitated RCSA sessions and risk and control ratings, when needed.
• Support external change management for credit bureau work and build-out testing, if applicable.
• Work with the line of business to identify inherent risks, controls, and applicable governance processes.
• Assist with identifying loss events associated with RCSA risks or processes and coordinate root cause analysis and action-plan evaluation with the line of business.
• Partner with support functions or risk experts to identify Enterprise and risk appetite indicators; collaborate on threshold evaluation and proposed changes and enter them in the GRC tool.
• Participate actively in issue remediation.
• Execute the ERM Scenario Analysis risk-management program.
• Develop and manage product inventory and execute the ERM product risk review program.
• Provide assistance with government programs, special internal projects, regulatory risk programs, and matters relating to acquisitions and strategic investments, as assigned.

Benefits

• Comprehensive benefits supporting employees’ and families’ physical, financial, emotional, and social well-being.
• Eligible to participate in an incentive compensation plan, with payments based on company, line-of-business, and/or individual performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level