Risk Analyst - 2LoD Controls Testing and Oversight

TD Bank•Mount Laurel, NY

1d•Onsite

About The Position

The Governance & Control Analyst III provides specialized business governance and control guidance and support for a business or functional area and implements policies/processes and/or initiatives to meet business governance and control objectives. May provide complex reporting, analysis, testing and assessments at the functional or enterprise level and is generally a lead or SME for a given area/function. TD Bank is guided by the Three Lines of Defense (LOD) Risk Framework: Risk Ownership (1LOD), Risk Oversight (2LOD), and Internal Audit (3LOD). The second line is independent of the business and provides policies, standards, and methodologies, with authority to assess and challenge the first line’s adherence to those expectations. In this role, you will support the scoping and execution of independent 2LOD controls testing across business processes and technology platforms, and contribute to regulatory and internal risk reporting. This is an experienced working professional role providing specialized services, advisory or processes/program support within their own area of specialty. It requires business experience, conceptual and practical knowledge of their specialty and knowledge of broader related areas. The role is accountable for their own work and acts as an escalation point or knowledge resource for others. They may lead projects or work streams within broader projects with moderate risk and may be accountable for managing ongoing activities, processes and functional programs. The role works within broad guidelines/policies and independently performs tasks from end-to-end. They solve moderately complex problems by taking a new perspective on existing solutions and exercise judgment based on the analysis of multiple sources of information. The role conveys business context when providing guidance within their field of specialty to internal or external stakeholders and identifies and leads problem resolution.

Requirements

Undergraduate degree preferred
Broad knowledge of business and risk and control environment
4+ years of relevant experience
Solid knowledge of governance, risk and control procedures, strategies & tactics
Knowledge of current and emerging trends
Skill in using analytical software tools, data analysis methods and reporting techniques
Skill in using computer applications including MS Office
Ability to communicate effectively in both oral and written form
Ability to work collaboratively and build relationships
Ability to work successfully as a member of a team and independently
Ability to exercise sound judgement in making decisions
Ability to analyze, research, organize and prioritize work while meeting multiple deadlines
Ability to process and handle confidential information with discretion
Bachelor’s degree required
2+ years of experience in operational risk, risk management, internal audit, compliance testing, or related roles within financial services
Ability to interpret guidelines, standards, policies, and analysis results to inform decisions and provide effective challenge at senior levels
Ability to work with large datasets and apply data analytics to support testing, insights, and reporting
Strong attention to detail and a demonstrated ability to identify root causes behind issues and observations
Strong analytical, problem-solving, and organizational skills
Confidence to challenge the status quo and navigate difficult conversations with professionalism and tact
Strong written and verbal communication skills, with the ability to build and maintain effective working relationships across functions

Nice To Haves

advanced degree and/or relevant certifications (e.g., CRISC, CISA, CIA, CPA, FRM, CFA) a plus
Experience using Microsoft Copilot and other approved generative and agentic AI tools to automate and improve tasks and processes
Knowledge of financial services industry products and related reporting is a plus
Business Banking experience is an asset

Responsibilities

Execute independent 2LOD testing of business and technology controls, including test planning, fieldwork, and documentation
Execute independent testing in the following areas: Control Design & Operating Effectiveness, Transactions Testing, Data Reconciliations, Logic Reperformance, Data Profiling/Analytics, End-User Computing (EUC) Review, Policy & Procedure Review, Governance/Oversight, and Regulatory Rule Compliance
Identify opportunities to streamline and automate controls testing (where appropriate), including through the use of generative AI, agentic AI, and RPI
Support maintenance of the testing inventory and update the testing universe and test plans based on regulatory developments and changes in the internal risk profile
Partner with business and technology stakeholders to discuss key controls, potential control gaps, root causes, and remediation plans
Assess processes and controls end-to-end and connect themes across issues to drive standardization of solutions, processes, and control design
Monitor emerging risk and regulatory trends, identify issues and opportunities, and recommend actions to management
Manage deliverables proactively and provide clear, timely status updates, risks, and dependencies to management
Perform ongoing risk analysis, escalate concerns appropriately, and support concise reporting for internal governance and regulatory needs
Provides specialized business governance and control related advice/support to management/leadership and respective teams for area(s) of specialization
Leads on the implementation of governance and control initiatives in support of the overall business/function strategy
Manages a set of business governance and control work activities requiring coordination across multiple areas
Reviews processes and controls and connects the dots across issues and control deficiencies in order to increase standardization of solutions, processes and controls
Supports/manages the integrated implementation of policies/processes/procedures/changes across multiple functional areas
Provides subject matter expertise to projects/initiatives, and participates in identifying, designing and testing solutions and supporting implementation activities
Ensures programs/policies/practices are well-managed, meet business needs/priorities, and comply with internal/external requirements
Exercises discretion in managing communication/correspondence, information and all matters of confidentiality
Conducts research projects; supports the development/delivery of materials and presentations to management or broader audience
Adheres to enterprise frameworks or methodologies that relate to activities for own business area
May lead work streams by acting as a project lead/SME for medium-scale projects/initiatives in accordance with project management methodologies
Protects the interests of the organization – identifies and manages risks, and escalates non-standard, high-risk transactions/activities as necessary
Maintains a culture of risk management and control, supported by effective processes in alignment with risk appetite
Is knowledgeable of and complies with Bank Code of Conduct
Participates as a member of the team, supports a positive work environment and ensures timely communication
Supports team by regularly enhancing knowledge/expertise in own area and participates in knowledge transfer
Keeps current on emerging trends/developments and grows knowledge of the business, related tools and techniques
Keeps others informed about the status/progress of projects
Contributes to team development of skills and capabilities through mentorship of others, by sharing knowledge and experiences and leveraging best practices
Contributes to a fair, positive and equitable environment
Acts as a brand ambassador for your business area/function and the Bank