Business Controls Sr. Associate - Enterprise Information Technology/Information Security

Fifth Third Bank•Cincinnati, OH

21h

About The Position

Make banking a Fifth Third better® We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank. Specific Job Role: Conduct Process Risk and Control Self-Assessments (PRCSA) for high and moderate risk Information Technology/Information Security processes in the 1st line of defense. Assessments include process mapping, capturing risks and controls, control testing, and process evaluation. Candidates must be comfortable communicating with technical experts, mid-level management and senior leadership. Candidates must have working knowledge of enterprise IT and IS domains and concepts to be successful in the role. As first line of defense, conducts analysis related to identifying, assessing, mitigating, and managing risks necessary to comply with new or changing laws, regulations, regulatory guidance, and best practices deemed necessary by key stakeholders (such as Legal, Compliance, Enterprise Risk and Audit partners). Supports Business Controls in advancing risk management, structure, processes, and tools in support of the organization’s Enterprise Risk Management (ERM) framework. Transforms data into business intelligence by developing and presenting information and insights to stakeholders. Monitors and manages risks to ensure compliance and validation of program effectiveness with assigned line of business or functional area, and Bancorp initiatives. Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank’s and LOB’s risk appetites, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types. At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be their best every day. The base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance. Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. You can learn more about those programs on our 53.com Careers page at: https://www.53.com/content/fifth-third/en/careers/benefits.html or by consulting with your talent acquisition partner.

Requirements

Bachelor’s degree or equivalent experience required (related field preferred).
5 + years of financial services industry, risk, business controls or compliance experience preferred.
Professional verbal and written communication skills and the ability to communicate with discretion and understanding when confidentiality is needed.
Must be analytical and possess ability to interpret and apply policies and regulations across a complex business.
Must proactively identify opportunities and take action to build trusting strategic internal and external relationships and networks.
Must be approachable, collaborative, and have the ability to influence others through interpersonal skills, thrive in a fast-paced dynamic environment, and be comfortable quickly shifting priorities on short notice.
Working knowledge of Microsoft Office products required.
Ability to work with minimal supervision.

Nice To Haves

Master’s degree in relevant field preferred.
Preferred to have at least one of the following certifications: CISA, CRISC, CISSP, or CISM.
All candidates are expected to obtain at least one of these certifications within two years of employment.
For Investment Advisors: FINRA Series 7 and 63/66 licenses preferred.
Knowledge of the Securities industry and SEC / FINRA regulations is preferred

Responsibilities

Assists business controls leadership with the development of complex strategies and the implementation of controls, policies, and procedures to increase effectiveness and efficiency related to the respective business or functional area.
Provides relevant expertise and analysis to stakeholders related to the identification, assessment, control, monitoring, testing and reporting of risks.
Investigates and assists in root cause analysis in instances of actual or potential operational loss.
Gathers and integrates information.
Identifies the need for and collects information to better understand issues, problems, and opportunities; integrates information from a variety of sources; and detects trends, associations, and cause-effect relationships.
Leverages expertise and stays informed of industry best practices and regulations to ensure compliance with all applicable laws, standards, and requirements, including, but not limited to, OCC Heightened Standards.
Supports the resolution of internal audit, compliance, or risk management related issues that could impact the classification, availability, or integrity of data or processes.
Highlights control breakdowns, inadequate processes, and unexpected events.
Implements corrective actions in partnership with Business Controls leadership to address process and control deficiencies.
Builds effective relationships with other internal business control groups and the second and third lines of defense (such as Legal, Compliance, Enterprise Risk, and Audit).
Collaborates with groups responsible for ensuring adequate information barriers are established, and the Bank’s compliance with policies and processes are in place in order to control the flow of certain information.
Serves as an analytical and procedural expert to peers on cross-functional processes or project deliverables.
Assists with execution of regulatory change management program to ensure applicable regulatory changes are identified, assessed against business processes, reported, and complied with.
May, if applicable, assist in the external change management for credit bureau working with centralized team and business control managers as build out testing.
Assists in identifying operational risks in accordance with the ERM, ensuring that adequate internal controls are in place to mitigate risks of all types.
Partners with business managers in implementing remediation actions per the Bancorp issues management framework; coordinates business ownership of processes, risks, controls, and tests.
Serves as coordinator for updates to data in archive systems (e.g., Open Pages, PPM, etc.).
Conducts RCSA facilitated sessions where risks and controls are rated.
Partners with Support Functions or Risk Experts to identify applicable Enterprise and Risk Appetite indicators and determine which will be designated "Key".
Collaborates with LOB on threshold evaluation and proposed changes; enter proposed indicators and changes in the GRC tool.
May assist in the determination of identifying loss events with applicable RCSA risks/processes.
May assist in the coordination root cause analysis, action plan evaluation with LOB and monitor action plan implementation.
Provides oversight to overall LOB Supplier/Outsourcing strategy and Review LOB business case for outsourcing & challenge.
Participates in escalated issues that impact LOB process & involve Supplier(s) where applicable.
Works with LOB to identify initial set of inherent risks and controls.
Identifies applicable governance processes and may complete control implementation.
Actively participates in issue remediation.
Executes on ERM Scenario Analysis risk management program.
Develop and manage product inventory and execute on ERM product risk review program.
May have additional responsibilities as assigned by LOB/Function leadership and Risk, including but not limited to: Assistance with new government programs or special internal projects. Assistance with new risk programs required by regulatory authorities or ERM. Assistance with diligence, closing, and other matters relating to acquisitions and strategic investments.