Internal Controls Officer Senior - City National Bank

Operational Risk Management (ORM) is responsible for providing independent and objective oversight of the management of risks arising from City National Bank's business processes, people systems or external events. The internal Controls team within ORM is responsible for providing governance and oversight to ensure CNB proactively manages its operational risks with a sound framework of internal controls. This includes oversight and independent challenge over the first line of defense Internal Controls Testing Framework, developing a common methodology and standards, executing independent testing of key operational controls, and conducting horizontal targets reviews, and issues management. 

The senior level is responsible for review and challenge self-assurance activities conducted by the front line to ensure compliance with Internal Controls Management Policy (ICMP) and Standard through ongoing assessment, monitoring, reporting and testing activities, including providing review and challenge to the outcomes of evidence-based control evaluation performed by the Control Testing Center of Excellence (CT COE). 

• Lead and supervise targeted consultative and advisory engagements on design and operational effectiveness of control management practices, including timely planning, execution, and reporting.
• Review and challenge the nature, timing, and extent of self-assurance activities planned and conducted by the first line of defense (1LOD) business groups and CT COE, including the completeness, accuracy, adequacy, and appropriateness of the control information and ratings captured in the centralized control inventory and Risk Control Self-Assessment (RCSA)
• Provides governance and oversight of the control inventory, control taxonomy, including data accuracy and completeness. Supports Enterprise Risk Internal Control (ERIC) roll-out, implementation and ongoing technical support
• Produce ongoing reporting including aggregate controls reporting, testing results, KPI/KRIs, program compliance, committee, and regulatory updates
• Supports the development of the 2LOD controls management Annual Testing Plan and Schedule, including facilitating the ongoing monitoring and tracking of Plan completion
• Provides timely reviews and feedback on work performed by Internal Controls consultants, including ensuring work is produced and documented in alignment with ICMP quality and content requirements or other requirements and ready for review by testing managers
• Perform annual refresh of ICM Policy and Standard. Develops 2LOD control management guidance, procedures, and templates to ensure quality standards are met
• Exercises independent judgment in identifying and assessing risk
• Prepares, reviews, and presents control testing results to all levels of first line and risk management clearly, including outlining the risk of control deficiencies
• Ensures issues are identified and documented appropriately and escalated to appropriate leadership
• Participates in the drafting of engagement reports as well as issues and recommendations to be presented to the business for control deficiencies
• Supervises, coaches and develops Internal Control consultants and provides training as needed
• Exercises effective communication and promotes positive client relations with business line colleagues and management
• Maintain authoritative knowledge and understanding of laws and regulations, regulatory guidance, policy, and procedures for operational functions covered/tested
• Provides 2LOD audit and regulatory exam support
• Executes additional departmental initiatives and other duties as assigned
• This open position is for the Financial Crimes Compliance (FCC) – Regulatory Program Governance Team.
• All references to operational risk/Operational Risk Management shall mean Financial Crimes risk/Financial Crimes Compliance.
• All references to controls shall mean Financial Crimes key controls.

Must-Have*

• Bachelor's Degree or equivalent
• Minimum of 7 years of experience in financial services industry, with at least five years in an operational risk management, internal audit, or compliance role
• Minimum 1 year of management or supervisory experience

Skills and Knowledge

• Bachelor’s degree or higher and other professional qualifications such as a CPA, CA, etc.
• Strong business knowledge of financial services and controls testing
• Understanding of Risk Management/Operational Risk Management and Internal Controls testing methodology
• Ability to handle complexity and ambiguity
• Proven track record building strong relationships across multiple business functions
• Ability to deal effectively with conflict
• Well-developed influencing, analytical and problem solving skills
• Ability to work independently with effective time and project management
• Ability to work in a matrix environment
• Strong communication (verbal and written), negotiation, and presentation skills required