Sr Business Control Specialist

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth.

We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences.

These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

This job is responsible for driving and executing on internal control discipline and operational excellence within a Line of Business (LOB) or Enterprise Control Function (ECF). Key responsibilities include providing analytical and administrative support for LOB or ECF specific processes and tools to drive adherence to enterprise-wide standards. Job expectations include monitoring and testing controls and implementing quality assurance and quality control processes within the LOB or ECF by evaluating data to help identify, track, and report issues and control improvements for remediation.

We are seeking a strategic and detail-oriented risk professional to support two critical risk assessment activities within Global Technology: Risk Identification and the Risk and Control Self-Assessment (RCSA). This role supports the quarterly execution, governance, and reporting of both activities, helping ensure assessments, risk inventories, ratings, commentary, remediation plans, and supporting documentation are accurate, complete, timely, and aligned with enterprise requirements.

In this role, you will coordinate assessment timelines and deliverables, engage stakeholders, collect and validate risk information, and prepare materials for senior leadership and governance committees. Responsibilities include analyzing identified risks, assessment results, control performance, KRIs, SPIs, issues, taxonomies, and process data; identifying gaps or inconsistencies; and translating complex information into clear, evidence-based reporting and executive commentary. You will also maintain procedures and supporting artifacts, address review feedback, and help ensure assessment conclusions and governance materials are well-supported and decision-useful.

Success in this role requires sound risk judgment, strong analytical and communication skills, and the ability to manage multiple priorities in a complex, matrixed environment. You will collaborate with Global Technology leaders, process and control owners, risk partners, and data and reporting teams to resolve questions, improve the quality of submissions, and complete required activities. You will also support system and process enhancements, user-acceptance testing, and continuous improvement efforts that strengthen consistency, traceability, efficiency, and analytical capabilities across both risk assessment activities.

Responsibilities:

• Supports the end-to-end quarterly execution of Global Technology’s Risk Identification and RCSA activities, including planning, coordination, stakeholder engagement, quality review, reporting, and governance preparation
• Coordinates the collection, validation, and consolidation of risk assessments, ratings, commentary, remediation plans, approvals, and supporting evidence
• Performs quality assurance reviews to identify incomplete information, inconsistencies, unsupported conclusions, data-quality concerns, and potential misalignment with enterprise requirements
• Analyzes risk information from multiple sources, including identified risks, inherent and residual risk assessments, control effectiveness, direction of risk, KRIs, SPIs, issues, controls, losses, taxonomies, and process data
• Develops executive presentations, governance materials, recurring reporting, and concise commentary that communicates material changes, heightened risks, remediation activities, and matters requiring management attention
• Maintains procedures, assessment documentation, governance artifacts, tracking mechanisms, and evidence to support transparency, traceability, and audit readiness
• Builds and sustains strong partnerships with Global Technology stakeholders, process and control owners, risk partners, and data and reporting teams to support timely and accurate execution
• Oversees the design and effectiveness of the risk and control environment to support Client Operational Services and ensure adherence to enterprise-wide standards
• Supports the monitoring and testing of controls by evaluating data to identify issues and control improvements for remediation
• Implements optimized controls and enhanced Quality Assurance (QA) practices to support business continuity efforts
• Conducts and coordinates quality inspection reviews to enhance employee performance and control effectiveness
• Performs QA activities including executing on controls, managing cases, and reporting results
• Executes initiatives by identifying areas of potential testing automation, procedural updates, thematic trends, test script updates, and coaching opportunities to enhance QA program success
• Supports the overall management of and research required for regulatory exams, internal audits, and other monitoring and inspection reviews and evaluates data and information relevant to inspection metrics to support governance activities for dashboard reporting

Required Qualifications:

• 4+ years of experience in risk management, operational risk, compliance, technology risk, controls, audit, governance, or a related discipline
• Working knowledge of Risk Identification, RCSA, risk and control frameworks, governance processes, or comparable risk-assessment activities
• Strong analytical and data-validation skills, including the ability to identify inconsistencies, evaluate supporting evidence, and develop clear, defensible conclusions
• Proven ability to coordinate complex, recurring deliverables involving multiple stakeholders, dependencies, and deadlines
• Exceptional writing, editing, and proofreading skills, with a focus on clarity, accuracy, and appropriate tone for executive-facing materials
• Experience preparing executive presentations, committee materials, risk commentary, and management reporting
• Strong collaboration skills and the ability to build effective relationships with stakeholders at all levels
• Ability to operate effectively in a matrixed organization and influence outcomes without direct authority
• Strong attention to detail and the ability to quickly identify gaps, inconsistencies, and opportunities for improvement
• Ability to work independently, manage competing priorities, and ensure consistent follow-through and timely delivery
• Advanced proficiency in Microsoft Excel, PowerPoint, Word, and related analytical and reporting tools

Desired Qualifications:

• Bachelor’s and/or master’s degree and/or relevant work experience
• Prior operational risk, compliance, controls, or governance experience within a technology organization
• Detailed, bank-specific risk-management and governance experience
• Experience with enterprise Risk Identification, RCSA, or other governance, risk, and compliance systems
• Experience performing risk trend analysis, taxonomy alignment, process-to-risk mapping, data reconciliation, or assessment-quality reviews
• Experience supporting senior leadership, risk committees, regulatory inquiries, or audit reviews
• Experience with reporting enhancements, or risk-process improvement initiatives
• Ability to work effectively with technical and nontechnical stakeholders

Skills:

• Controls Management
• Issue Management
• Monitoring, Surveillance, and Testing
• Quality Assurance
• Risk Management
• Analytical Thinking
• Attention to Detail
• Critical Thinking
• Problem Solving
• Written Communications
• Decision Making
• Innovative Thinking
• Prioritization
• Recording/Organizing Information
• Research

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Pay Transparency details

US - NJ - Pennington - 1300 American Blvd - Hopewell Bldg 3 (NJ2130)

Pay and benefits information

Pay range

$87,000.00 - $145,000.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.