First Line Risk and Control Officer

Location: On site at location listed in job posting. 

SUMMARY

The Senior First Line Risk & Control Officer role sits within the first line of defense, working directly with business leaders and control owners and partnering with the second (2LOD) and third (3LOD) Lines of Defense to build and sustain a strong first line risk and control environment.

The role blends two complementary responsibilities at a senior level. The individual sets direction for the function itself by leading the design of risk and control programs, owning process and control documentation, maturing the control inventory, establishing and governing assessment cycles, and shaping the reporting that gives leadership a clear view of the risk profile. In equal measure, the individual owns risk management in a live operating environment by driving complex issues to closure, leading root cause and thematic analysis of operational risk events, representing the first line to auditors and regulators, and serving as a trusted senior risk partner to the business.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

•     Issues management. Lead the first line issue lifecycle across assigned business verticals, including validation, root cause analysis, action plan design, owner accountability, escalation of aging or at-risk items, closure evidence, and sustainability validation. Set the standard for issue owner meetings and ensure closed items withstand second line challenge, audit review, and regulatory examination.

•     Risk event management. Direct the capture, triage, and escalation of risk events within established thresholds; lead root cause analysis on significant events; ensure events convert into issues where a control failed or was absent; and own thematic analysis that turns the event population into control improvements.

•     Risk and control self-assessment (RCSA). Own RCSA execution across a portfolio of risk assessable units, including building the process universe, leading process-to-risk-to-control mapping, challenging residual risk ratings with the business, and driving remediation of control gaps under the enterprise methodology.

•     Controls management. Set and apply first line control standards, prioritizing higher-risk controls; ensure control design is documented and owned; safeguard the integrity of the control inventory in the system of record; and lead assessment of design and operating effectiveness.

•     Business partnership and proactive risk identification. Serve as the senior first line risk partner to business leaders, anticipating emerging risk ahead of events and influencing decisions before losses occur, while providing guidance and technical direction to less-experienced risk and control staff.