Summary:
Responsible for establishing, maintaining, and continuously improving the Payments Division’s risk monitoring, control governance, testing, and validation framework. This role serves as the first-line authority for controls, Key Risk Indicator (KRI) governance, Key Performance Indicator (KPI) oversight, control inventory management, monitoring activities, change management, and remediation validation. The Control Manager develops risk intelligence capabilities that provide management with meaningful insights into emerging risks, control effectiveness, operational performance, and risk trends. Through data governance, monitoring, testing, and validation activities, this position helps ensure controls remain appropriately designed, operating effectively, and aligned with regulatory expectations and organizational risk appetite.
Qualifications:
Education: Bachelor’s degree in Business Administration or related field.
Licenses/Certifications: CRCM or other relevant professional certifications are a plus.
Experience: Seven or more years of experience in Operational Risk Management, Internal Controls, Compliance Monitoring, Internal Audit, Testing, Risk Analytics, or Banking Risk Management. Or equivalent combination of experience and education.
Essential Functions:
A: Job Specific:
- Owns and maintains the Payments Risk Management KRI and KPI governance framework.
- Establishes thresholds, triggers, escalation criteria, and reporting standards.
- Defines metric ownership and accountability requirements.
- Monitors performance against established thresholds and identify emerging trends.
- Develops executive dashboards and governance reporting packages.
- Recommends enhancements to monitoring metrics based on changes in risk exposure, regulatory expectations, or business strategy.
- Establishes and maintains risk data governance standards supporting Payments Risk Management activities.
- Defines data ownership, lineage, quality expectations, and control requirements.
- Monitors data quality controls and identify data integrity issues.
- Validates completeness, accuracy, and consistency of risk reporting data.
- Partners with business and technology stakeholders to remediate data quality concerns.
- Supports management, regulatory, and audit reporting requirements through effective data governance practices.
- Serves as the control governance lead for Payments Risk Management.
- Maintains the inventory of key risks, controls, and associated ownership assignments.
- Establishes standards for documenting controls and control objectives.
- Reviews new and modified controls to ensure consistency with governance expectations.
- Facilitates recurring reviews of the control inventory.
- Ensures control inventory alignment with risk assessments, monitoring activities, and issue management processes.
- Develops and maintains risk-based monitoring and testing methodologies.
- Designs monitoring procedures that evaluate both control design and operating effectiveness.
- Executes or oversee monitoring and testing activities across critical processes.
- Analyzes testing results and identify potential control deficiencies.
- Documents observations, findings, and opportunities for improvement.
- Recommends enhancements to strengthen control effectiveness and operational resilience.
- Validates corrective actions implemented in response to issues, audits, examinations, reviews, and control deficiencies.
- Performs effectiveness testing to confirm remediation activities adequately address root causes.
- Evaluates sustainability of corrective actions following implementation.
- Monitors remediation commitments and target completion dates.
- Escalates overdue, ineffective, or incomplete remediation efforts.
- Supports issue closure decisions through independent validation and documented evidence.
- Develops recurring governance reporting for management committees and leadership teams.
- Identifies emerging operational, compliance, fraud, customer, and third-party risk trends.
- Prepares trend analysis and risk intelligence reporting.
- Supports decision-making through data-driven insights and risk analysis.
- Provides management with actionable reporting designed to support proactive risk management.
Knowledge/Skills/Abilities:
- The ability to communicate effectively and clearly, both in verbal and written communications.
- Excellent interpersonal skills.
- Self-directed and motivated.
- The ability to manage multiple tasks.
- Excellent problem-solving skills.
- Ability to read, analyze and comprehend journals, audit reports, regulations and legal documents.
- Ability to respond to common inquiries or complaints from employees, customers, regulatory agencies, or members of the business community.
- Ability to effectively present information to top management and employee groups.
- Strong analytical skills, able to dissect complex problems and synthesize large amounts of information.
- Strong understanding of payments operations, banking regulations, risk management frameworks, and control governance practices.
- Experience designing and managing KRIs, KPIs, dashboards, and executive reporting.
- Experience developing control inventories, testing methodologies, monitoring programs, and remediation validation frameworks.
- Proven ability to partner effectively across Payments, Compliance, Operations, Information Security, Data Management, Vendor Management, and Executive Leadership.
Sutton Bank is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, disability, pregnancy or protected veteran status.