BRCO Control Testing Lead

BRCO Control Testing Lead

The Business Risk and Control Officers (BRCOs) play a pivotal role in guiding the business to identify and understand risk exposures and the controls needed which are integral to reducing risk and safeguarding our customers and colleagues. BRCOs are critical to the success of the Risk Management Lifecyle and play a role in Planning, Identifying, Assessing, Mitigating, Monitoring, and Reporting. BRCOs are members of the First Line of Defense (1LOD) who :

• Provide leadership and coaching to the 1LOD to proactively identify and effectively manage risks.
• Translate and educate 1LOD to enable and drive business relevant implementation of Second Line of Defense (2LOD) risk management frameworks, policies, taxonomies, and inventories.
• Review, validate, and test 1LOD activities to ensure adequate control design and effective control operation.
• Provide credible challenge to 1LOD colleagues, ensuring safeguard and risk mitigation measures are upheld in decision making and adherence to 2LOD frameworks and policies prior to 2LOD review.
• Drive two-way collaboration across 1LOD and 2LOD; liaise between 1LOD and 2LOD to drive engagement throughout the risk management lifecycle.
• Collaborate and coordinate across the organization to help navigate and mitigate horizontal risk promoting resilience and ensuring safety and soundness.
• Document, aggregate and report risk in accordance with the risk management lifecycle.
• The Business Risk and Control Office (BRCO) Control Testing Lead is responsible for the structured review to validate that processes and controls function as intended to mitigate risk, including SOX controls. The BRCO Control Testing Lead does not own the design nor execution of controls.

Position Responsibilities

Translates and interprets corporate testing policies and participates in the implementation of overall independent testing program for the Line of Business (LOB).

Develops testing processes and procedures in alignment with enterprise risk frameworks and policies and conducts baseline review activities.

Conducts testing of control design and operating effectiveness; including issue control testing / validation for more complex issues.

Documents and provides evidence for testing results.

Reports on control testing results and key themes to management reflecting trends, emerging risks, strengths, and weaknesses.

Adapts testing methodology (e.g. sampling methodology, resourcing) based on testing results and overall risk profile of organization.

Business Partnering

A successful candidate will have the following knowledge and / or skills :