Business Control Manager

About This RoleAI processing…

Key Responsibilities

• 1
  Own the control environment for your assigned business unit - maintain the control library, keep control records current, and drive enhancements as products and processes change.
• 2
  Evaluate new products, features, and material process changes for regulatory risk before launch - reviewing business requirements early in scoping, identifying regulatory touchpoints, and proposing control designs and residual risk summaries.
• 3
  Run proactive reviews of existing processes and control environments - full risk identification, severity assessment, control gap analysis, and control maturity evaluation
• 4
  Map identified risks to the specific regulatory obligations they implicate, and maintain risk, obligation, and control records in our GRC platform so that coverage and gaps are visible and auditable.
• 5
  Design preventive, detective, and directive controls with the Engineering or Product owner who will build them - agreeing control type, frequency, automation level, and the evidence the control must produce - then validate after implementation that the control is operating as designed and the gap is closed.
• 6
  Own the compliance control workstream for incidents in your business unit: perform gap analysis from the root cause analysis, identify the control gap and the obligation it affects, design the control with the Engineering or Product owner, track implementation against SLA, validate the control once live, and close the compliance issue.
• 7
  Classify control gaps by root cause and use that data to surface systemic weaknesses - recurring patterns within your business unit and across business units - and turn them into recommendations that go beyond any individual control.
• 8
  Translate regulatory change in your business unit into control impact - working with Regulatory Affairs and Compliance Advisory to assess what a change means for existing controls, and advising the business on the adjustments required.
• 9
  Perform ongoing reviews of business procedures, member-facing disclosures, marketing, and complaint data to identify compliance risks, and partner with stakeholders on corrective action.
• 10
  Build durable working relationships with product, engineering, legal, and operations partners, and support bank partner, internal audit, and regulatory examination requests relating to controls in your business unit.
• 11
  Help business partners understand the controls they own and why they exist - through working sessions, documentation, and day-to-day partnership rather than formal training delivery.
• 12
  Maintain auditable records of risk and control decisions - including recommendations the business declines, with the rationale and residual risk documented - to a standard that lets Legal, Compliance, or Internal Audit reconstruct how a decision was reached. Contribute to regular reporting to Compliance Governance on control changes, new risks, and open items.

Requirements

• 4+ years of experience in regulatory compliance, risk management, or internal controls within the financial services or fintech sector. At least 3+ years of experience working in consumer protection laws, including Reg Z, Reg E, UDAAP, or similar regulations.
• Strong understanding of key consumer protection regulations, including but not limited to EFTA, TILA, UDAAP, and other financial regulatory frameworks.
• Hands-on experience documenting risks, controls, and issues in a GRC platform - AuditBoard, Archer, ServiceNow IRM, LogicGate, or similar.
• Demonstrated ability to advise product, engineering, risk, and operations teams on consumer protection and regulatory risk, including holding a position when a business partner pushes back.
• Strong analytical skills - you can take an incident, a process, or a requirements document and identify where the control should sit and what it needs to produce as evidence.
• Excellent verbal and written communication skills, with the ability to explain regulatory concepts to technical and non-technical partners and influence decisions.
• A track record of taking a control from problem statement to validated and documented - independently, on a deadline, without needing the process defined for you.

Perks & Benefits