Sr Business Control Specialist

Bank of America•Pennington, AL

8d•$87,000 - $145,000

About The Position

At Bank of America, this role supports internal control discipline and operational excellence within a Line of Business or Enterprise Control Function. It provides analytical and administrative support for processes and tools, monitors and tests controls, and uses quality assurance and quality control practices to identify, track, and report issues and control improvements for remediation. The position supports two Global Technology risk assessment activities: Risk Identification and Risk and Control Self-Assessment (RCSA). It helps coordinate quarterly execution, governance, and reporting, ensuring assessments, risk inventories, ratings, commentary, remediation plans, and supporting documentation are accurate, complete, timely, and aligned with enterprise requirements. The specialist coordinates timelines and stakeholder input, validates risk information, analyzes assessment and control data, identifies gaps, and prepares evidence-based reporting and executive commentary. The role also maintains procedures and supporting artifacts, addresses review feedback, and helps ensure assessment conclusions and governance materials are well-supported and useful for decision-making. It collaborates with Global Technology leaders, process and control owners, risk partners, and data and reporting teams. Additional work includes supporting system and process enhancements, user-acceptance testing, continuous improvement, control monitoring and testing, quality inspections, audit and regulatory review support, and activities that improve consistency, traceability, efficiency, and analytical capabilities.

Requirements

At least 4 years of experience in risk management, operational risk, compliance, technology risk, controls, audit, governance, or a related discipline.
Working knowledge of Risk Identification, RCSA, risk and control frameworks, governance processes, or comparable risk-assessment activities.
Strong analytical and data-validation skills, including identifying inconsistencies, evaluating supporting evidence, and developing clear, defensible conclusions.
Ability to coordinate complex, recurring deliverables involving multiple stakeholders, dependencies, and deadlines.
Exceptional writing, editing, and proofreading skills, with a focus on clarity, accuracy, and appropriate tone for executive-facing materials.
Experience preparing executive presentations, committee materials, risk commentary, and management reporting.
Strong collaboration skills and ability to build effective relationships with stakeholders at all levels.
Ability to operate effectively in a matrixed organization and influence outcomes without direct authority.
Strong attention to detail and ability to identify gaps, inconsistencies, and opportunities for improvement.
Ability to work independently, manage competing priorities, and ensure consistent follow-through and timely delivery.
Advanced proficiency in Microsoft Excel, PowerPoint, Word, and related analytical and reporting tools.

Nice To Haves

Bachelor’s and/or master’s degree and/or relevant work experience.
Prior operational risk, compliance, controls, or governance experience within a technology organization.
Detailed, bank-specific risk-management and governance experience.
Experience with enterprise Risk Identification, RCSA, or other governance, risk, and compliance systems.
Experience performing risk trend analysis, taxonomy alignment, process-to-risk mapping, data reconciliation, or assessment-quality reviews.
Experience supporting senior leadership, risk committees, regulatory inquiries, or audit reviews.
Experience with reporting enhancements or risk-process improvement initiatives.
Ability to work effectively with technical and nontechnical stakeholders.

Responsibilities

Supports the end-to-end quarterly execution of Global Technology’s Risk Identification and RCSA activities, including planning, coordination, stakeholder engagement, quality review, reporting, and governance preparation.
Coordinates the collection, validation, and consolidation of risk assessments, ratings, commentary, remediation plans, approvals, and supporting evidence.
Performs quality assurance reviews to identify incomplete information, inconsistencies, unsupported conclusions, data-quality concerns, and potential misalignment with enterprise requirements.
Analyzes risk information from multiple sources, including identified risks, inherent and residual risk assessments, control effectiveness, direction of risk, KRIs, SPIs, issues, controls, losses, taxonomies, and process data.
Develops executive presentations, governance materials, recurring reporting, and concise commentary communicating material changes, heightened risks, remediation activities, and matters requiring management attention.
Maintains procedures, assessment documentation, governance artifacts, tracking mechanisms, and evidence to support transparency, traceability, and audit readiness.
Builds and sustains partnerships with Global Technology stakeholders, process and control owners, risk partners, and data and reporting teams to support timely and accurate execution.
Oversees the design and effectiveness of the risk and control environment to support Client Operational Services and ensure adherence to enterprise-wide standards.
Supports monitoring and testing of controls by evaluating data to identify issues and control improvements for remediation.
Implements optimized controls and enhanced quality assurance practices to support business continuity efforts.
Conducts and coordinates quality inspection reviews to enhance employee performance and control effectiveness.
Performs QA activities, including executing controls, managing cases, and reporting results.
Executes initiatives by identifying potential testing automation, procedural updates, thematic trends, test script updates, and coaching opportunities to enhance QA program success.
Supports management and research for regulatory exams, internal audits, and other monitoring and inspection reviews; evaluates data and information relevant to inspection metrics to support governance dashboard reporting.
Supports system and process enhancements, user-acceptance testing, and continuous improvement efforts.