Risk and Compliance Officer - Enterprise Data Management
The Risk and Compliance Officer supports execution of the Bank's Integrated Risk Management framework and is expected to work with business units to identify, assess, monitor risks through leveraging risk assessments, KRIs, training and governance and leadership reporting.
Key Responsibilities and Duties
- Supports the development, implementation, and maintenance of the risk frameworks, policies, and procedures.
- Participates in risk governance committees and prepare documentation as needed.
- Conducts risk assessments across business lines, identifying emerging risks and control gaps.
- Performs ongoing monitoring of key risks and controls within their assigned lines of business.
- Performs routine analysis, conducts interviews and develops regular reporting in order to identify emerging risks to create recommendations to enhance control environments and create risk mitigation strategies.
- Coordinates and contributes to quarterly enterprise risk reports for executive management and Board Risk Committee.
- Assists assigned lines of business with completing various types of assessments and testing including trigger-based testing, RCSAs, including review, challenge, and validation
- Supports scenario analysis, risk appetite monitoring, and key risk indicator (KRI) tracking.
- Liaises with business units and support functions to ensure consistent application of risk management practices.
- Provides support to risk and compliance leadership for regulatory examinations, audits and ad-hoc board requests
Minimum Qualifications
- 5 years of experience in compliance or enterprise risk management
- 3+ years of related work experience in compliance, risk and/or governance program management, with significant exposure to Technology, Cybersecurity and Information Governance
- Strong background in supporting enterprise data management functions in financial services, life sciences or other regulated organizations
- Deep understanding of data governance principles, frameworks and best practices
- Experience performing risk assessments, RCSAs, or controls testing
Preferred Qualifications
- Bachelor’s Degree in MIS, Computer Science; Masters in Data Science or Information Governance strongly preferred.
- 7+ years of experience in compliance or enterprise risk management
- Preferred certifications: CDMP, DAMA Data Governance, CIPT, CIA, CISA
- Working knowledge of SQL scripting, other data querying and analytics is preferred
Educational Requirements
- University (Degree) Preferred
Physical Requirements
- Physical Requirements: Sedentary Work
Career Level
8IC
Qualifications
Additional Responsibilities
- Track, manage and maintain an inventory of regulatory obligations and advise business partners and corporate functions on required policies and processes
- Provide thought leadership on implementing regulations, deliver compliance education and training as needed.
- Oversee the design, implementation and execution and maintenance of new compliance standards
- Execute advisory and monitoring activities to assess regulatory posture, document track and drive resolution of compliance issues
- Identify and discuss top compliance risks with upper management and provide regulator reporting on regulatory posture
- Proactively drive business ownership of issues including root cause analysis and resolution. Identify and implement correction action plans to support remediation
- Act as a trusted advisor to senior management on emerging risk and regulatory / legal trends.
Program Oversight
- Liaises with the business to review and analyze processes and systems for data risks and compliance gaps. Advises on the implementation of necessary changes to business processes, systems, or program to ensure compliance throughout the data supply chain. Interprets, scopes and clarifies key regulations, expectations and emerging supervisory themes
- Risk Management
- Evaluating data-related risks and controls against Enterprise Policies, standards, regulatory requirements and industry standards
- Develop clear, and actionable control statements and assessment findings
- Monitoring and identifying issues with KRI limits and risk appetite to ensure operational risks are managed within acceptable parameter
- Performs and oversees initial and periodic risk assessments, targeted testing, and remediation plan development. Identifies and assesses compliance risks associated with organizational activities, including developing new products, services, client relationships, and business practices.
- Facilitate development of data management KPIs/KRIs. Ensure data governance frameworks are applied consistently across all teams and that changes to data elements are reviewed and approved throughout their lifecycle.
- Business Advisory Support
- Provide consultative guidance in drafting self-identified issues and corrective actions and support remediation activities across enterprise data management. Advise data management teams with updating control effectiveness and control environment ratings. Provides expert consultation to senior Risk and Compliance leaders and associate teams on data-related risks and data compliance-related matters. Supports data quality issue management and provides advisory support to the Chief Data Officer. Collaborates with the IT Infrastructure, Enterprise Architecture and Policy and Standards teams to develop and deploy data management capabilities across the bank. Facilitates enterprise-wide business unit integration and conversion activities with respect to data assets. Supports regulatory engagements
Posting end date - 5/22/26
