Chief Control Officer

Community Financial System, Inc.•UNAVAILABLE, UNAVAILABLE

16h•Onsite

About The Position

BPAS is a national provider of retirement plan administration, employee benefit solutions, and fiduciary and trust services. For more than 50 years, BPAS has redefined what it means to be a benefits partner by combining deep expertise, transparent service, and a people-first approach to make benefit plans easier, smarter, and more effective for everyone involved. As a financially stable subsidiary of Community Financial Systems, Inc. (NYSE: CBU), BPAS supports 10,375 plans, $132 billion in trust assets, $1.3 trillion in fund administration, and more than 980,000 participants in partnership with advisors, trustees, and financial professionals across the nation.

Requirements

12 to 15 or more years of progressive experience in risk management, controls, audit, or compliance within financial services or a regulated industry.
Bachelor’s degree required.

Nice To Haves

MBA or advanced degree preferred.
Relevant certifications such as CRCM, CERP, CIA, CRMA, CAMS, CFA Charter holder or similar risk/compliance credentials are a plus.

Responsibilities

Accountable for building and leading the first-line risk and control function within BPAS.
Own and maintain the benefits administration risk and control self-assessment process, ensuring risks are appropriately identified, rated, and mapped to controls.
Maintain an accurate risk and control inventory aligned with the enterprise risk framework.
Ensure key controls are designed appropriately and operating effectively across operational, compliance, technology, third-party/vendor, and conduct risk areas.
Drive timely identification, escalation, and remediation of control gaps, issues, events, and near misses.
Serve as the business owner for executing the enterprise risk management framework within BPAS.
Implement enterprise expectations related to operational risk, compliance risk, third-party risk, technology/cyber risk, and business continuity.
Partner with second-line Risk and Compliance teams to interpret new or updated enterprise policies and regulatory requirements and apply them in a practical, business-specific manner.
Prepare and present risk and control reporting to business leadership, enterprise risk committees, and applicable governance forums.
Own the issue management lifecycle for the business, including identification, root cause analysis, corrective action planning, validation, and closure.
Escalate material risks, control breaks, and emerging risks to senior business leadership and enterprise risk partners in a timely manner.
Support regulatory exam readiness and respond to regulatory or audit inquiries pertaining to the business.
Foster a strong risk culture within BPAS by embedding risk ownership and accountability into day-to-day business operations.
Advise business leadership on risk considerations related to products, services, technology, and strategic initiatives.
Work closely with Internal Audit, Compliance, Legal, and Enterprise Risk on exams, audits, independent testing, and related business responses.
Oversee third-party and vendor risk management for the business, given the vendor-intensive nature of benefits administration.
Ensure appropriate due diligence, ongoing monitoring, and contractual risk controls for critical vendors, including recordkeeping platforms, third-party administrators, and data exchange providers.
Help ensure controls around sensitive data, including PII, PHI, and financial account data, meet enterprise and regulatory standards.
Partner with Technology Risk and Cybersecurity on control requirements for platforms supporting Benefits Administration.
Build and lead a business-embedded control and risk team, potentially including resources focused on control testing, issue management, and reporting analysis.
Develop talent and establish clear roles and responsibilities across the three lines of defense model.