Business Risk & Controls Advisor - Artificial Intelligence (Remote, NC)

First Citizens Bank•Raleigh, NC

3d•Remote

About The Position

This remote position may be hired only in North Carolina. The Business Risk & Controls Advisor supports the Enterprise Data and Analytics Unit’s risk activities in alignment with the Company’s Risk Appetite and Corporate Strategy. The role helps manage Artificial Intelligence (AI) risks and controls across risk types and supports execution of risk policies, standards, procedures, and program requirements. It provides risk advisory services and facilitates communication across Data, Technology and/or Cyber, the second and third lines of defense, and regulators. The position develops an understanding of the organization’s business environment and analyzes trends and external factors to identify risks and opportunities. It supports implementation of risk policies and procedures, identifies risks and control gaps, tracks issues through resolution, and works with stakeholders on remediation and mitigation plans. It also supports regulatory and Internal Audit engagements and submissions, and develops or uses risk reporting to monitor performance, emerging risks, indicators, and breaches. The advisor works with the business to develop metrics for AI governance, including control coverage, key risk and performance indicators, and exception management. The role applies knowledge of control environments to mitigate risks and builds stakeholder consensus on remediation strategies, including for risks introduced by AI. It advises business risk and control leadership and senior leaders in governance forums and supports timely communication of emerging issues and regulatory requirements.

Requirements

Bachelor’s degree and 4 years of experience, or high school diploma/GED/equivalent and 8 years of experience, in Financial Services, First Line Risk Management, Enterprise Risk, or Operations Risk.
Knowledge of risk techniques, practices, and control frameworks.
Knowledge of banking and government regulatory requirements and processes.
Knowledge of regulatory guidance pertaining to enterprise risk and operational risk.
Ability to work effectively with associates, senior management, and committees.
Demonstrable knowledge of AI-related regulatory developments, industry standards, and recognized risk management frameworks, such as NIST AI RMF and ISO/IEC 42001.

Nice To Haves

Preferred area of study: Finance or Risk Management.
Experience in project management or internal or external consulting.
Prior experience in a Technology or Cyber Risk Organization.
Preferred certifications: CRCM, PMP, CERP, CAMS, ISACA CISA, ISACA CRISC - IO, ISACA AAIR, or AIGP.

Responsibilities

Develop and maintain an understanding of the organization’s business environment, products, services, client base, markets, and competitive landscape.
Analyze business trends, drivers, and external factors to identify patterns, interdependencies, opportunities, and risks, and operationalize second-line requirements for the business area.
Collaborate with cross-functional teams to assess the effects of regulatory changes, market disruptions, business operations, and strategy.
Support implementation of risk policies, standards, and procedures in alignment with the Company’s risk management framework.
Help identify business risks and control gaps.
Lead tracking and resolution of issues, ensuring timely escalation and remediation.
Collaborate with business units and stakeholders to develop and execute action plans and mitigation strategies addressing root causes and preventing recurrence.
Monitor issue-remediation status and effectiveness and provide regular updates and reports to senior management.
Coordinate with functions such as Compliance and the second line of defense to align with risk management and governance objectives.
Support prioritization and capacity assessment to align resources with strategic objectives and risk initiatives.
Support regulatory and Internal Audit inquiries, examinations, and audits with internal stakeholders.
Assist in developing regulatory submissions, responses, and reports, ensuring accuracy, completeness, and timely submission.
Define business-unit risk reports or extrapolate relevant information from existing data and dashboards.
Monitor business-unit risk and control performance, summarize top and emerging risks, and identify actions to address their impacts.
Partner with the Reporting program to ensure timely escalation of key-indicator limits and breaches under the Risk Appetite Framework.
Advise business risk and control leadership, business-unit senior leadership, and their direct reports in relevant risk governance meetings.
Provide feedback on and collaborate on governance documents; drive implementation of program policies, standards, and procedures.
Ensure timely communication about current and emerging issues and regulatory requirements.
Collaborate with the business unit to develop metrics measuring AI governance effectiveness and adoption, including control coverage, key risk indicators, key performance indicators, and exception management.
Apply knowledge of control environments to proactively mitigate risks and influence control owners and stakeholders to reach consensus on risk mitigation and remediation strategies, including for AI-related risks.