Senior Business Risk & Control Analyst

TIAA•Frisco, TX

1d•Onsite

About The Position

We’re seeking a Senior Business Risk & IT Controls Analyst to support the execution of control programs that mitigate operational and IT risk. This role plays a key part in strengthening risk culture across the TDOSS organization and ensuring compliance with key regulations, IT standards, and enterprise frameworks. You’ll collaborate with teams across all Three Lines of Defense, including Regulatory Support, Supervisory Affairs, IT, Cybersecurity, and the Business Controls Office. Your work will support TIAA’s Regulatory Risk Management (RRM) Program, including regulatory exam support, rule implementation, and management action plans (MAPs). This role offers the opportunity to make a meaningful impact on enterprise risk culture while working with cross-functional teams in a dynamic and collaborative environment.

Requirements

3+ years of professional work experience
Must have at least 3 years of Excel experience to include all of the following: - Excel Formulas and Functions: - VLOOKUP for precise data retrieval - Pivot Tables - Pivot Tables to analyze and summarize large datasets
Macros in Excel - Automating tasks with macros

Nice To Haves

Proficiency in tracking tasks and ensuring timely completion of follow-up actions
Proficiency in creating and managing automated workflows using Power Automate to streamline business processes
Proficiency in developing custom business applications using Power Apps, including canvas apps, model-driven apps, and portals
Strong ability to convey information clearly and concisely in written form, including emails, reports, and documentation
Ability to accurately and efficiently capture key points and action items during meetings and discussions
Strong problem-solving skills to troubleshoot issues and improve automation processes

Responsibilities

Support technology teams in managing and executing effective risk and control practices
Assist in identifying control gaps and documenting remediation steps
Govern risk treatment and remediation plans through completion
Collaborate with first, second, and third line of defense partners to ensure compliance with ERM and IT standards
Contribute to IT regulatory exam support, process and control mapping, and risk training initiatives
Maintain required documentation and evidence in the system of record
Prepare reports and materials for risk governance meetings, including status updates and recommendations
Communicate new or revised policies, procedures, and processes to relevant teams
Capture key points and action items during meetings with accuracy and efficiency