Business Controls Manager - Commercial and Payments IT

Fifth Third Bank • Cincinnati, OH

24d • Onsite

About The Position

Fifth Third Bank is undergoing a significant technology modernization, aiming to transform its Commercial and Payments businesses through scalable platforms, cloud-native capabilities, and modern engineering practices. This role is crucial for supporting the Commercial IT and Payments IT teams and platforms, particularly those leveraging AWS for customer-facing and enabling services. The position operates at the intersection of technology delivery, payments processing, and enterprise risk management, requiring close collaboration with product and technology teams to ensure secure, responsible innovation within the bank's risk appetite.

Requirements

• Bachelor’s degree in a related field or equivalent experience required; degree in Computer Science, Cyber Security, Information Systems, or a technology-related field preferred.
• 5 years of financial services industry, risk, business controls or compliance management experience preferred.
• Strong leadership, critical thinking and collaboration skills required.
• Working knowledge of payments ecosystems (ACH, wires, real-time payments), commercial platforms, cloud computing concepts, and technology-enabled business processes.
• Ability to influence peers, colleagues and managers across business and divisional lines to take action on complex, technical or sensitive topics with companywide impact.
• Must be analytical and possess the ability to interpret and apply policies and regulations across a large, complex business.
• In-depth business or functional expertise as well as knowledge of applicable policies and procedures required.
• Broad working knowledge of banking products and operations required.
• Excellent presentation and interpersonal skills required.
• Working knowledge of Microsoft products required.
• For Investment Advisors: FINRA Series 7 and 63/66 licenses preferred.
• Knowledge of the Securities industry and SEC / FINRA regulations is preferred.

Nice To Haves

• Master’s degree preferred.
• AWS Certified Solutions Architect or AWS Certified Security – Specialty
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Cloud Security Professional (CCSP)
• Certified in Risk and Information Systems Control (CRISC)
• ITIL, COBIT, or other technology risk, audit, or governance-related certifications

Responsibilities

• Establishes processes for first-line-of-defense risk limits, policies, and controls to identify, measure, monitor, and control risks in alignment with the bank's risk appetite.
• Assists Business Controls leadership in developing strategies and implementing controls, policies, and procedures to enhance effectiveness and efficiency for Commercial IT and Payments IT platforms and technology-enabled processes.
• Influences senior business managers and peers to enforce strong risk and governance management while balancing business strategy.
• Works with Business Controls leadership and Commercial Banking and Treasury/Payments LOB/function to translate business control strategies into actionable plans.
• Collaborates with senior leadership to develop, implement, and communicate the organization's mission, goals, and strategies regarding business controls within the Enterprise Risk Management (ERM) framework.
• Proactively manages relationships with other internal business control groups and the second and third lines of defense (compliance, legal, enterprise risk, audit).
• Represents Commercial IT and Payments IT on appropriate Bancorp Risk governing committees.
• Highlights control breakdowns, inadequate processes, and unexpected events, implementing corrective actions.
• Notifies management of changes to applicable Enterprise-level policies and risk limits.
• Leverages regulatory knowledge to ensure compliance with laws, regulations, standards, and requirements related to Payments, Commercial Banking technology, cloud computing, cybersecurity, and technology operations, including OCC Heightened Standards.
• Conducts a continuous scan of industry, regulatory, and legal trends and changes.
• Manages and provides comprehensive reporting on Key issues resulting from business, control functions, audit, or other internal and external sources.
• Resolves issues raised by the second and Third Lines of defense and external auditors.
• Executes organization design and effectiveness to establish a structure that maximizes governance and productivity with appropriate talent.
• Provides guidance and training on effective implementation and monitoring of Enterprise risk management frameworks.
• Reviews policies for completeness and adherence to the Bancorp’s and LOB’s risk appetites, ensuring policies are maintained centrally.
• Leads the execution of the regulatory change management program impacting payments processing, commercial platforms, and technology infrastructure.
• Reviews Self-identified issues to determine alignment with Commercial IT and Payments IT and assigns Issue owners, providing oversight, credible challenge, and approval on severity.
• Actively participates in issue remediation.
• Builds testing for applicable LOB or Function processes.
• Manages and identifies operational risks in accordance with ERM, ensuring adequate internal controls are in place.
• Partners with business managers in implementing RCSA standards and procedures, ensuring quality, consistency, and sufficiency of implementation for payments products, commercial services, and supporting systems and processes.
• Maintains a complete and current inventory of all material processes, product lines, services, and functions, with associated Key risks and their thresholds.
• Evaluates risks associated with new products and strategic initiatives prior to formal project review and determines mitigating controls.
• Completes control implementation QA and post-implementation reviews on in-scope initiatives.
• Completes data quality checks, monitors action plan implementation, and reports operational loss data and trends.
• Associates loss events with applicable RCSA risks/processes and coordinates root cause analysis and action plan evaluation.
• Provides oversight to the overall LOB Supplier/Outsourcing strategy and participates in escalated issues involving suppliers.
• Reviews LOB business cases for Outsourcing and challenges them.
• Coordinates the development of and reporting on risk dashboards, combining Enterprise-level information with functional manager insights.
• Provides guidance to line managers in identifying and monitoring Key risk indicators.
• Executes assigned components of the ERM Scenario Analysis program, including technology, cyber, and digital disruption scenarios.
• Advises on and approves Risk Acceptances identified in the LOB/Function.
• Develops and manages product inventory and executes on the ERM product risk review program.
• May lead new government programs or special internal projects.
• May lead the implementation and sustainability of new risk programs required by regulatory authorities or ERM.
• May actively participate in diligence, closing, and other matters relating to acquisitions and strategic investments.

Benefits

• Comprehensive benefits and differentiated compensation offerings
• Eligible to participate in an incentive compensation plan
• Extensive benefits programs designed to support individual needs encompassing physical, financial, emotional and social well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager