Manager, BRCO Control Testing I
The Business Risk and Control Officers (BRCOs) play a pivotal role in guiding the business to identify and understand risk exposures and the controls needed which are integral to reducing risk and safeguarding our customers and colleagues. BCROs are critical to the success of the Risk Management Lifecyle and play a role in Planning, Identifying, Assessing, Mitigating, Monitoring, and Reporting. BRCOs are members of the First Line of Defense (1LOD) who:
- Provide leadership and coaching to the 1LOD to proactively identify and effectively manage risks.
- Translate and educate 1LOD to enable and drive business relevant implementation of Second Line of Defense (2LOD) risk management frameworks, policies, taxonomies, and inventories.
- Review, validate, and test 1LOD activities to ensure adequate control design and effective control operation.
- Provide credible challenge to 1LOD colleagues, ensuring safeguard and risk mitigation measures are upheld in decision making and adherence to 2LOD frameworks and policies prior to 2LOD review.
- Drive two-way collaboration across 1LOD and 2LOD; liaise between 1LOD and 2LOD to drive engagement throughout the risk management lifecycle.
- Collaborate and coordinate across the organization to help navigate and mitigate horizontal risk promoting resilience and ensuring safety and soundness.
- Document, aggregate and report risk in accordance with the risk management lifecycle.
The Manager, Business Risk and Control Office (BRCO) Control Testing I is responsible for leading a small to medium size team of testers to execute a structured review to validate that processes and controls function as intended to mitigate risk, including SOX controls. The Manager, BRCO Control Testing I does not own the design nor execution of controls.
Position Responsibilities
Translates and interprets corporate testing policies and manages/drives implementation of overall independent testing program for the Line of Business (LOB)
- Created and adheres to a defined testing schedule and provides periodic updates on progress.
- Provides guidance to other team members supporting the engagement.
- Establishes strong relationships with business partners and other key stakeholders (i.e. SOX Office).
Develops testing processes and procedures in alignment with enterprise risk frameworks and policies and conducts baseline review activities
- Understands LOB end to end business processes, products, services, financial statement risks, controls and risk profile.
- Adheres to testing procedures, standards, and methodologies established by Second Line of Defense (2LOD). Tests are performed periodically based on inherent risk level and frequency of controls operation; scope and sample size vary based on the type of test, inherent risk level, and dataset population size.
- Addresses any review and challenge comments as received to ensure alignment with 2LOD testing requirements. Designs and executes testing plans and scripts to evaluate the effectiveness of the overall control environment, including for SOX compliance.
- Performs walkthrough prep and walkthrough execution.
Conducts testing of control design and operating effectiveness; including issue control testing/validation for more complex issues
- Assesses both Design (is the control is designed to accomplish the goal or detect/prevent a misstatement - test sample of 1) and Effectiveness (was the control executed correctly).
- Performs the role of Tester/Preparer (does the testing, picks the samples, executes testing based on test plan, documents, manages follow-up, reviews comments) or Reviewer (reviews the testing, documents issues).
- Ensures 1LOD quality assurance procedures are aligned with frameworks and policies.
Documents and provides evidence for testing results
- Documents narratives, flowcharts, and controls.
Reports on control testing results and key themes to management reflecting trends, emerging risks, strengths, and weaknesses
- Identifies and escalates issues for remediation.
- Validates remediation of control deficiencies and issues, including sustainability.
- Supports audits, exams and assessments conducted internally and externally.
Adapts testing methodology (e.g. sampling methodology, resourcing) based on testing results and overall risk profile of organization
- Identifies and assesses the impact of the changing regulatory environment on business objectives, risk appetite and testing methodology.
Business Partnering
- Partners and engages with relevant business partners at varying levels in the organization to develop and maintain a strong control environment through effective testing and related activities that lead to early identification and sustainable mitigation of risks.
- Drives a strong enterprise risk culture by fostering rigor and discipline focused on risk and compliance awareness, ethical business practices, transparency, and escalation.
- Learns continuously about the line of business to strengthen subject matter expertise and provide more valuable application of control testing.
HR and Financial Management
- Selects, motivate, and retain high performing talent, cultivating a spirit of teamwork and continuous improvement with shared goals and objectives.
- Supports the development and growth of direct reports through on-going direction, coaching and performance management.
- Manages expenses and budget associated with the team and the work managed.
A successful candidate will have the following knowledge and/or skills:
- Strong familiarity with critical business processes and controls, as well as overall business needs and objectives, for the Line of Business.
- Strong track record of driving timely and effective issue resolution in a financial services context.
- Deep expertise and ability to educate colleagues on risk management, controls, and compliance concepts, frameworks, and policies.
- Ability to establish authority, influence stakeholders, and productively debate issues (e.g., credible challenge) at all levels including without direct reporting responsibility.
- Ability to build strong relationships and engage constructively in a proactive and transparent approach with cross-functional stakeholders, to challenge status quo and drive buy-in to achieve common goals.
- Ability to clearly and effectively communicate, including ability to summarize and explain complex findings and issues to a wide range of audiences.
- Ability to apply sound judgment and appropriately escalate concerns and issues.
- Ability to demonstrate managerial courage and inspire colleagues across the organization to embrace change.
- Ability to gather, analyze and interpret large datasets from various sources.
- Strong analytical and critical thinking skills with high attention to detail and accuracy.
- Ability to manage multiple tasks and projects, prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment.
- Self-starter, able to work independently, flexible and can navigate a complex organization.
Position Qualifications
- Bachelor's degree from an accredited university or a High School Diploma or GED and 6 years of Risk Management or other related experience in the Financial Services Industry
- 7 years of experience in Risk Management, Compliance, Audit, or related field
- Experience in planning, executing and reporting on testing reviews and/or regulatory issue validation activities
- Knowledge and extensive experience with testing/auditing principles, particularly in the understanding of risk and controls, development and execution of testing strategy and approach, perform controls design and effectiveness testing and undertaking data testing
- Understanding of rules, laws, regulatory requirements and ability to develop/execute tests to assess for compliance with requirements
- Proficient in risk management software, MS Office Suite, and other related technology tools
- Strongly Preferred: Experience managing or leading a team
- Strongly Preferred: 5 years of experience in Financial Services industry and/or knowledge of Business Line products, services, and business processes
About Comerica
We know our employees are critical to our overall success and we are dedicated to investing in their future. One of the ways we do this is to offer a comprehensive Total Rewards package designed to recognize and reward individual performance, as well support health, well-being, development and security for our colleagues and their family. Total Rewards consists of cash compensation, development and flexible benefit programs designed to meet individual needs today and in the future. Your salary will be commensurate with your work experience and our programs are reviewed regularly to ensure each remain competitive. We are proud to offer benefits such as health and welfare programs, strong retirement benefits, and generous paid time off programs. You and your eligible family members, including domestic partners and their children, can participate in medical, dental, and vision benefits, 401(k) and pension, income protection benefits such as life insurance, AD&D, and supplemental health programs to offset unexpected health care expenses. We also have a variety of time off programs for things like vacation, sick time, disability, and parental leave. Eligibility for some programs varies based on employment status and tenure.
Upon offer, Comerica conducts a comprehensive background and fingerprint check.
NMLS certification requirement: where applicable, a favorable background check screening, credit check, fingerprint check, and NMLS certification is required in accordance with the SAFE Act.
Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, and strategically aligned into three major business segments; the Commercial Bank, the Retail Bank, and Wealth Management. Comerica's colleagues focus on relationships, and helping people and businesses be successful. In addition to Texas, Comerica Bank locations can be found in Arizona, California, Florida and Michigan, with select businesses operating in several other states, as well as in Canada and Mexico.
Comerica is proud to be an Equal Opportunity Employer - veterans/individuals with disabilities, committed to workplace diversity.
|
Comerica Bank
life insurance, parental leave, paid time off, sick time, 401(k)
Dec 23, 2024