Director Business Risk & Control Officer Compliance, Governance and Third Party Risk

Comerica • Full-time • United States • 1m ago

Director Business Risk & Control Officer

The Director, Business Risk and Control Officer (BRCO) is a pivotal role in guiding the business to identify and understand risk exposures and the controls needed which are integral to reducing risk and safeguarding our customers and colleagues. The Director, BRCO leads a team who are critical to the success of the Risk Management Lifecyle and plays a role in Planning, Identifying, Assessing, Mitigating, Monitoring, and Reporting. The Director, BRCO and their team are members of the First Line of Defense (1LOD) who:

Provide leadership and coaching to the 1LOD to proactively identify and effectively manage risks.
Translate and educate 1LOD to enable and drive business relevant implementation of Second Line of Defense (2LOD) risk management frameworks, policies, taxonomies, and inventories.
Review, validate, and test 1LOD activities to ensure adequate control design and effective control operation.
Provide credible challenge to 1LOD colleagues, ensuring safeguard and risk mitigation measures are upheld in decision making and adherence to 2LOD frameworks and policies prior to 2LOD review.
Drive two-way collaboration across 1LOD and 2LOD; liaise between 1LOD and 2LOD to drive engagement throughout the risk management lifecycle.
Collaborate and coordinate across the organization to help navigate and mitigate horizontal risk promoting resilience and ensuring safety and soundness.
Document, aggregate and report risk in accordance with the risk management lifecycle.

Position Responsibilities:

Leads a team of risk and control colleagues. Develops and executes on plan to assess the controls within the line of business. Engages with business leaders and holds them accountable as risk and control owners.
Performs standard and thematic risk reviews of processes, identifying new risk and control themes and trends, leading special projects, identifying, and executing on opportunities to re-engineer inefficient processes and controls to be automated, preventative, and sustainable, identifying continuous improvement opportunities, utilizing, and promoting utilization of analytics to identify issues, and assisting with implementations of changes to frameworks.
Serves as a Business Risk and Control leader, liaising with risk and control owners and their teams as well as business leaders to provide proactive advice and input on key business and control decisions. Ensures risk and control owners are accountable, enabling them to clearly articulate and manage the risk profile of a process, demonstrating active, robust risk management to key stakeholders and senior business leaders. Provides credible challenge to business leaders and oversight to continuous monitoring plans and risk and control assessments. Creates governance materials and reporting for relevant internal risk management oversight including committees and business meetings.
Articulates and demonstrates risk and control environment to key stakeholders including 1LOD, 2LOD, 3LOD, and senior business leaders. May serve as a point of contact or reference for regulatory matters related to risk and control for the line of business. Executes remediation plans and processes within specific risk management activities. Responsible for the leadership and talent management of risk and control colleagues and the financial management of their team.

Position Qualifications:

Bachelor's degree from an accredited university or in lieu of a bachelor's degree a High School Diploma or GED and 6 years of Risk Management or other related experience in the Financial Services Industry.
10 or more years' experience across Operations, Risk Management, Compliance, and / or Audit roles requiring management of diverse risk types/pillars.
10 or more years experience in advising, providing subject matter expertise, and credibly challenging colleagues in a risk and control environment.
Preferred: 10 or more years Large Financial Services institution experience with knowledge of core risk management programs including Risk and Control Self-Assessment (RCSA), Control Testing, Issue Management, Operational Risk Event (ORE), Key Risk Indicators etc..
Preferred: 1st or 2LOD experience developing, implementing and executing a consumer restitution program within a Large Financial Services institution environment.
Preferred: Direct experience interacting with CFPB, OCC or the FRB during routine exams, on-going monitoring and enforcement actions.