GT Risk & Reg Management – GIS Technical Risk Officer

About the position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! The candidate will be executing delivery against technology priorities- effectively manage, drive, support and govern the execution of Independent Technical Assessments or Program Execution supporting critical technology priorities with the required level of urgency and intensity. Candidate would be responsible for aggregating data from multiple sources/partners, incorporating data in value-add report formats and ensuring report generation and delivery processes are efficient, reliable, and accurate. Global Technology Risk and Regulatory Management is seeking a self-starter who is motivated, passionate, thrives in a fast-paced culture, balances priorities, drives delivery, flawless execution, and enjoys team successes. This role provides opportunity to work across multiple lines of business in Global Technology and exposure with executive level leadership. This individual contributor role will support disciplined execution of activities related to issues and exam management. The role will be primarily responsible for identifying and documenting risks and related mitigation plans as well as validation of evidence to support risk mitigation for all GIS related Audit, Compliance, Ops Risk, Regulatory and/or GIS identified risks, issues, control enhancements and MRAs within defined SLAs. This includes ensuring evidence is sufficient to warrant closure of an issue and responding timely to ad hoc inquiries from Risk and Internal Audit. The candidate will be expected to manage a portfolio of risks and issues and understand holistic risks across their assigned area and be able to make determinations on how they may affect other divisions and GIS. The candidate will also be expected to work with Issue Owners to drive on time remediation and to escalate potential roadblocks that may delay on-time completion.

Responsibilities

• Oversees the design and effectiveness of the risk and control environment to support Client Operational Services and ensure adherence to enterprise-wide standards
• Supports the monitoring and testing of controls by evaluating data to identify issues and control improvements for remediation
• Implements optimized controls and enhanced Quality Assurance (QA) practices to support business continuity efforts
• Conducts and coordinates quality inspection reviews to enhance employee performance and control effectiveness
• Performs QA activities including executing on controls, managing cases, and reporting results
• Executes initiatives by identifying areas of potential testing automation, procedural updates, thematic trends, test script updates, and coaching opportunities to enhance QA program success
• Supports the overall management of and research required for regulatory exams, internal audits, and other monitoring and inspection reviews and evaluates data and information relevant to inspection metrics

Requirements

• 5+ years of experience with audit, exam management, and/or compliance (or similar experience)
• Proven Risk Leader with demonstrated analytical and critical thinking abilities; knowledge of risk management /risk framework; ability to identify, escalate, and debate risk
• Ability to synthesize the complex into meaningful messaging to drive timely decisions, knowing when to engage others for additional input, and when to act independently
• Strong relationship management skills to navigate the complexities of aligning stakeholders, building consensus, and resolving conflicts in a large, distributed organization; proven ability to influence peers/stakeholders
• Proven ability to manage multiple and often competing priorities in a global and fast paced environment
• Ability to communicate in a clear and concise manner, influencing the opinions and actions of key stakeholders and gaining their trust
• Detail oriented with an ability to review documentation for accuracy and report on the status of risk reviews
• Cyber security or information security domain knowledge
• Wide knowledge of computing platforms and solutions
• Ability to 'connect the dots' for others across multiple data points, make connections upstream/downstream that may not be easily noticeable
• Knowledge of project management concepts
• Problem solver who can manage through ambiguity and controversial situations successfully
• Excellent facilitation and presentation skills

Nice-to-haves

• Bachelor's and/or Master’s degree
• CISSP, CRISC, CISA, CISM certification or similar
• Prior operational risk or compliance experience in the technology arena
• Detailed, bank-specific risk management and governance experience
• Ability to work with technical and non-technical business owners to support governance activities for dashboard reporting