Risk and Controls Specialist

Bancorp Bank, The•Sioux Falls, SD

1d•Onsite

About The Position

The Risk and Controls Specialist role is responsible for supporting first-line operational risk, governance, and business transformation activities for Fintech Solutions. The role combines risk analysis and control governance with project coordination, process improvement, and responsible use of automation and artificial intelligence (AI) to help the business manage risk while improving how work is performed. This position works across Business Risk and Controls, Product, Operations, Client Services, Enterprise Risk Management, Compliance, Internal Audit, Control Testing, Technology, Data, and Automation teams. The role translates risk and business needs into clear requirements, well-controlled processes, and sustainable solutions, with accountability for business decisions and technical development remaining with the appropriate owners.

Requirements

Bachelor's degree in business, finance, risk management, information systems, operations, project management, or a related field, or an equivalent combination of training and experience preferred.
Minimum of 3 years of experience in operational risk, internal controls, audit, compliance, governance, business analysis, project coordination, process improvement, banking operations, fintech, payments, or a related regulated environment.
Experience with risk and control inventories, issue management, risk assessments, governance documentation, process mapping, requirements gathering, or cross-functional project delivery.
Ability to analyze quantitative and qualitative information, identify themes and root causes, and translate complex business needs into clear and practical recommendations.
Strong analytical, organizational, written, verbal, and interpersonal communication skills with the ability to manage multiple priorities and follow-up activities.
Proficiency in Microsoft Office applications.

Nice To Haves

Experience with Archer or another governance, risk, and compliance (GRC) platform and tools such as Quickbase, Power Automate, SharePoint, Microsoft Teams, Monday.com, Visio, or Power BI preferred.
Familiarity with generative AI, custom GPTs, prompt design, automation risks, or responsible use of AI in a regulated environment preferred.
Experience in banking, fintech, payments, financial services, or another regulated industry preferred.
Professional certification such as CRCM, CERP, CRISC, CISA, CIA, CAPM, CBAP, Lean

Responsibilities

Maintains accurate process, risk, and control inventories for assigned Fintech Solutions areas and coordinates required change requests and supporting documentation.
Supports annual and trigger-based risk and control self-assessments, risk assessments for new products and significant changes, and evaluation of control design and effectiveness.
Assists business and control owners in identifying practical control enhancements that address risk while supporting efficient and scalable operations.
Maintains action, decision, and escalation tracking to support timely completion of risk and governance commitments.
Coordinates development and review of management responses, remediation plans, extension requests, and risk acceptance requests while preserving accountability with the applicable business owner.
Monitors issue milestones, aging, dependencies, and evidence requirements and escalates emerging delays or barriers before commitments become past due.
Coordinates evidence collection and responses for internal audits, regulatory examinations, control testing, and other assurance activities involving assigned business areas.
Participates in walkthroughs and testing discussions and provides accurate process, control, and risk context.
Monitors and analyzes key risk indicators, operational loss events, business incidents, emerging risks, issue trends, and other relevant risk information.
Prepares concise, decision-ready materials for the Fintech Solutions Risk Committee, working groups, and senior leadership, including trend, root-cause, and impact commentary.
Connects risk metrics, issues, control performance, and business changes to identify recurring themes and opportunities for broader risk reduction.
Documents current-state processes and supports development of future-state process maps, workflows, RACI (responsible, accountable, consulted, and informed) matrices, operating models, and ownership structures.
Gathers and translates business, risk, control, data, reporting, and technology needs into clear requirements, user stories, acceptance criteria, and implementation tasks.
Supports project charters, milestone plans, decision logs, status reporting, stakeholder working sessions, and follow-up for Business Risk and Controls-supported initiatives.
Identifies process, control, data, system, handoff, and ownership gaps and recommends opportunities to simplify, standardize, eliminate, or automate work.
Supports the inventory and governance of Fintech Solutions AI-enabled solutions, custom GPTs, prompts, automations, and related technology-enabled workflows.
Develops prompt concepts, workflow designs, and low-code solution requirements that improve efficiency while aligning with approved risk, privacy, information-security, and AI governance expectations.
Coordinates required governance reviews, feasibility assessments, approvals, ownership, access, documentation, continuity, and support requirements for AI and automation use cases.
Partners with Technology, Automation, Data, and system owners on technical development and configuration.
Performs approved business-side configuration or administration.
Develops or supports test plans to confirm that processes and solutions meet documented requirements and control expectations.
Assesses implementation readiness, including procedures, training, communications, support models, access, data quality, control evidence, and business ownership.
Leads the development of job aids, training materials, and stakeholder communications and coordinates transition of completed solutions into business-as-usual ownership.
Supports post-implementation reviews and measurement of time savings, risk reduction, quality improvement, adoption, or other expected benefits.
Drafts, reviews, and maintains business standards, procedures, process documentation, risk statements, control descriptions, and related governance materials in partnership with subject matter experts and document owners.
Coordinates publication and lifecycle management of approved governance documents and helps ensure business changes are reflected in procedures, controls, systems, training, and ownership.
Builds effective relationships with business and risk partners and provides practical guidance on risk, controls, governance, projects, and responsible use of technology.
Performs other duties as assigned.