Business Control Manager - Governance and Risk Program Manager

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:
This job is responsible for leading and executing on internal control discipline and operational excellence within a Line of Business (LOB) or Enterprise Control Function (ECF). Key responsibilities include executing LOB or ECF processes and tools to drive adherence to enterprise-wide standards. Job expectations include supporting the implementation of quality assurance and quality control processes within the LOB or ECF through ongoing monitoring and testing of controls, identifying issues and control improvements for remediation, and building out actions plans and milestones.

The Governance & Risk Program Manager serves as the centralized coordinator for governance, audit, risk, and issue management activities across Enterprise & People Services. This role partners with business leaders, process owners, business controls, audit teams, and technology partners to ensure timely completion of regulatory, risk, audit, and remediation deliverables.

Responsibilities:

• Leads the assessment of the design and effectiveness of the risk and control environment to support Client Operational Services and ensure adherence to enterprise-wide standards
• Performs monitoring and testing of controls, identifying issues and control improvements for remediation
• Leads the implementation of optimized controls and enhanced Quality Assurance (QA) practices to support business continuity efforts
• Manages the performance and productivity of team members that conduct quality inspection reviews
• Ensures timely execution of QA activities including control execution, case management, and results reporting
• Manages and reviews all operations front line unit responses for regulatory exams, internal audits, and other monitoring and inspection reviews
• Ensures accuracy of data and that relevant information is captured for inspection metrics to support governance for dashboard reporting
• Coordinate all audit requests across Enterprise & People Services (E&PS) inclusive of developing audit response plans and timelines, tracking remediation commitments through closure, facilitating audit readiness reviews and preparing executive reporting for audits in flight.
• Serve as the central coordinator for Issue (SII, RII) and Control Enhancement activities in partnership with Business Controls and process owners. Maintain issue inventories and remediation timelines, ensure compliance with documentation requirements and provide status reporting across E&PS.
• Coordinate ADSF and TPCA remediation inclusive of tracking findings, managing action plans and remediation activities. Partner with TPEMs and technology owners to ensure deliverable timelines are met and maintain a central tracker for reporting.
• Develop and maintain governance reporting and dashboards that provide visibility into audit activity, issues, control enhancements, remediation progress, key risks, and aging actions.
• Monitor and assess audit findings, issue inventories, remediation plans, and control enhancement efforts to identify trends, recurring root causes, and opportunities for operational improvements

Required Qualifications:

• 7+ years of experience in governance, risk management, audit, controls, compliance, operational risk, business controls, or related program management functions.
• Experience coordinating regulatory, internal audit, external audit, risk, or issue remediation activities within a complex organization.
• Demonstrated experience managing issue remediation programs, including action plan tracking, governance routines, risk assessment, and closure validation.
• Strong understanding of risk and control frameworks, issue management processes, and remediation governance.
• Experience developing executive reporting, dashboards, and governance materials for senior leadership.
• Proven ability to manage multiple workstreams simultaneously, establish priorities, and drive accountability across diverse stakeholder groups.
• Strong analytical skills with experience identifying trends, root causes, control gaps, and opportunities for process improvement.
• Experience partnering effectively with business leaders, technology teams, audit partners, risk functions, and control organizations.
• Proven ability to navigate ambiguity and exercise sound judgment to drive decisions
• Excellent written and verbal communication skills with the ability to translate complex risk, audit, and remediation information into concise executive-level messaging.
• Advanced proficiency in Microsoft Excel, PowerPoint, and data visualization/reporting tools.

Desired Qualifications:

• Financial services or other highly regulated industry experience.
• Experience supporting Shared Services, Human Resources, Enterprise Services, Operations, Corporate Functions, or similar enterprise-wide support organizations.
• Knowledge of internal control frameworks and methodologies, including risk assessments, control design, control testing, and remediation management.
• Experience managing remediation efforts associated with technology risk, third-party risk, process risk, or regulatory findings.
• Familiarity with issue management frameworks such as Regulatory Issues, Self-Identified Issues (SII), Risk-Identified Issues (RII), and control enhancement programs.
• Experience supporting technology governance activities, including application remediation, third-party control assessments, or technology risk management processes.
• Knowledge of audit lifecycle management, including audit planning, fieldwork, management responses, remediation validation, and closure processes.
• Experience creating metrics and key risk indicators (KRIs) to support ongoing governance and risk oversight.
• Demonstrated ability to influence without direct authority and build strong partnerships across multiple organizational levels.
• Continuous improvement mindset with experience establishing governance routines, standardizing processes, and enhancing risk management practices.

Skills:

• Controls Management
• Oral Communications
• Risk Management
• Stakeholder Management
• Strategy Planning and Development
• Continuous Improvement
• Drives Engagement
• Influence
• Strategic Thinking
• Talent Development
• Data and Trend Analysis
• Decision Making
• Monitoring, Surveillance, and Testing
• Problem Solving
• Quality Assurance

Internal employees who are currently working from home are still eligible to apply. However, if selected for the role, you may be required to work onsite in accordance with the workplace excellence policy

Shift:

1st shift (United States of America)

Hours Per Week: 

40