Business Risk & Control Officer
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve all substantive info, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. The posting includes EEO statement at end; we must remove that. Also "Metropolitan Commercial Bank provides equal employment opportunities..." remove. Also "MCB maintains a drug free workplace." remove.
Also remove "For more information about the Bank, please visit the Bank’s website at MCBankNY.com." maybe considered boilerplate? It's not navigation but maybe considered info about bank; but it's part of description. Might keep? It's not essential to role. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. That line is not those; but it's more like a link. Might keep? It's not essential but it's not prohibited. However we can keep as part of About the Bank? There's no About the role heading. We could create an "About the role" section using Position Summary. The initial paragraph about the Bank could be considered "About the Bank" but not requested headings. The allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content accordingly.
We have Position Summary -> could be About the role.
Essential Functions & Responsibilities -> Responsibilities.
Qualifications & Skills -> Qualifications (maybe also Skills). Preferred Qualifications & Skills could be merged into Qualifications or Skills? We could have Qualifications section with required qualifications, and Skills section with skills? But we have both Qualifications & Skills heading. The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have Qualifications and Skills separate. But we have "Qualifications & Skills" and "Preferred Qualifications & Skills". Could split: Qualifications (required) and Skills (maybe also required). Preferred could be included under Qualifications as optional? But we should not invent sections with filler. We have content for both required and preferred. Could make Qualifications section list required qualifications, and Skills section list skills (maybe from both). However the required qualifications include: 8+ years..., ability to document processes..., strong analytical..., effective written..., ability to work collaboratively..., driven by passion... Those are more like skills/qualifications. The preferred qualifications include experience with risk and control self-assessments, SOX controls, etc., knowledge of regulations, experience using GRC tools, understanding of AI tools, professional certification.
Thus we could have Qualifications (required) and Skills (preferred) or combine. But we need to avoid thin sections. Perhaps better: Have Qualifications section containing both required and preferred (maybe split into sublists?). But we need to use
- for any list. Could have two lists: Required Qualifications and Preferred Qualifications within same section? Might be okay.
Alternatively, we could have Qualifications (required) and Skills (preferred). Let's do that.
Pay section: we have Potential Salary: $160,000 - $180,000 annually. Include that.
Schedule section: Standard 4-day in-office requirement, 1 day remote.
Benefits: not mentioned, so omit.
Now we need to output only HTML fragment, no /. Use
headings.
Structure:
About the role
Position Summary ...
Responsibilities
- ...
... etc.
We need to preserve all substantive info from Essential Functions & Responsibilities. That section includes several bullet-like paragraphs but not actual bullet list. We need to convert each sentence or clause into - items. Must not lose detail.
Let's extract the responsibilities text:
"Risk & Control Governance
Serve as a first line risk and control partner to Retail Banking leadership, supporting the identification, assessment, monitoring, and reporting of risks across retail products, processes, branches, digital banking activities, and operational workflows.
Maintain awareness of applicable policies, procedures, regulatory requirements, and risk appetite expectations impacting Retail Banking activities.
Support preparation of risk updates (including key risk indicators), control status reporting, issue summaries, policy updates, and other materials for Retail Banking management and various risk governance forums.
Control Execution, Monitoring & Testing Readiness
Coordinate with process owners to document, execute, and evidence key retail controls, including controls related to new account opening, dormant account monitoring, reconciliations, customer servicing, and other operational processes utilized by the Retail Banking department.
Review control documentation and supporting evidence for completeness, accuracy, timeliness, and alignment with established procedures.
Support management’s readiness for internal control reviews, SOX-related activities, compliance monitoring, internal audit, and regulatory examinations.
Issue Management & Remediation
Identify, document, and escalate control gaps, process breakdowns, emerging risks, incidents, and audit or compliance findings in a timely manner.
Partner with Retail Banking process owners to develop remediation plans, define corrective actions, establish target dates, and track progress through closure.
Validate that remediation efforts address root causes and result in sustainable control improvements.
Risk Assessments, KRIs & Process Improvement
Support retail risk assessments, risk and control self-assessments, control mapping, and key risk indicator development or refresh activities.
Analyze trends in operational losses, exceptions, customer complaints, quality control results, audit findings, and other risk indicators to identify themes and improvement opportunities.
Recommend practical control enhancements, process improvements, and documentation updates that support efficient operations and effective risk management.
Cross-Functional Coordination
Collaborate with Compliance, Enterprise Risk Management, Internal Audit, Finance, Operations, Technology, Information Security, and other control partners to support Retail Banking risk priorities.
Assist with policy, procedure, and training updates that affect Retail Banking controls, customer-facing processes, and operational risk management.
Promote a culture of accountability, timely escalation, and control ownership within the Retail Banking business."
We need to turn each of these sentences into
- . Keep the subheadings? Could keep them as part of list items or maybe as inside
- . But we should not add extra headings inside list? It's okay to have
- containing bold text. We'll preserve the content.
Now Qualifications (required) from "Qualifications & Skills" paragraph:
"8+ years of retail banking operations, branch processes, customer account servicing, operational risk, and internal control concepts.
Ability to document processes, identify control gaps, assess risk impacts, and recommend practical remediation actions.
Strong analytical, problem-solving, organizational, and follow-up skills with attention to detail and deadlines.
Effective written and verbal communication skills, including the ability to translate risk and control issues into clear business language.
Ability to work collaboratively with business partners, control functions, and senior stakeholders while maintaining independence of thought and appropriate escalation discipline.
Driven by a passion and curiosity to continuously learn how various technological systems, including AI, can enhance the work performed within Retail Banking risk and control environments."
We'll make each bullet.
Preferred Qualifications & Skills:
"Experience with risk and control self-assessments, SOX controls, issue management, audit remediation, control testing, or compliance monitoring preferred.
Knowledge of banking regulations and expectations relevant to retail banking operations, including deposit account opening, customer servicing, complaints, fraud risk, and operational controls preferred.
Experience using GRC tools (e.g., Riskonnect, AuditBoard), workflow, reporting, or data analysis tools preferred.
Understanding of, or demonstrated interest in using, Artificial Intelligence tools such as Microsoft Copilot to improve productivity, analysis, documentation, and risk management processes preferred.
Professional certification such as CRCM, CIA, CRMA, CERP, or similar risk, compliance, audit, or banking certification is a plus."
We'll make list.
Pay section:
Pay
Potential Salary: $160,000 - $180,000 annually
Schedule section: Schedule
Standard 4-day in-office requirement, 1 day remote (of your choosing and subject to manager’s approval)
Now About the role: Use Position Summary paragraph(s). There's also introductory paragraph about the Bank before Position Summary. Should we include that? It's about the Bank, not the role. The instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It doesn't forbid other headings, but we should stick to those. The About the role section should contain the Position Summary. Could also include a brief about the Bank? Might be considered extra but not prohibited. However we should preserve all substantive information. The introductory paragraph about the Bank is substantive about the company. Should we include it? It could be placed before About the role as a
without heading. That's allowed. The instruction: "Output ONLY the HTML fragment — no /, no markdown code fences." So we can include a
about the Bank before the headings. That preserves info.
Thus we will output:
Come Work With Us Metropolitan Commercial Bank (“MCB” or the “Bank”) is a New York City–based, full-service commercial bank providing tailored banking solutions to businesses, institutions, and individuals. Founded in 1999, MCB operates banking centers in Manhattan and Boro Park, Brooklyn, within New York City, as well as in Great Neck on Long Island, New York, and Lakewood, New Jersey. The Bank recently expanded to Miami, Florida with their newest Brickell banking center. Metropolitan Commercial Bank offers a comprehensive suite of commercial, business, and personal banking products and services to small businesses, middle-market and corporate enterprises, private and public institutions, municipalities, and local government entities. The Bank has earned national recognition for its financial performance, innovation, and strategic growth. The Bank was named one of Newsweek’s Best Regional Banks in 2024 and 2025. Additionally, MCB recently received Editor’s Choice recognition at the Banking Tech Awards USA for Digital Onboarding & Omnichannel Banking and in 2026, the Bank earned Great Place To Work certification and received the Web Award Standard of Excellence for MCBankNY.com. We are a client-focused organization that values technological innovation and excellence. A strong technical mindset, AI fluency, and adaptive skills are essential for our employees to effectively contribute to our mission and drive our success. We foster human–AI teaming and strong governance to ensure technology is used responsibly and in alignment with Bank policies and procedures. For more information about the Bank, please visit the Bank’s website at MCBankNY.com.
Then About the role
Position Summary The Business Risk & Control Officer (Retail) is a high-impact opportunity to help shape and strengthen first line risk management within a dynamic Retail Banking business. This role will be central to building practical, sustainable controls; identifying and addressing emerging risks; and driving improvements across retail operations, products, processes, and customer-facing activities. The position is ideal for a proactive risk professional who enjoys solving problems, partnering with business leaders, and making risk management and compliance frameworks a practical enabler of safe, effective growth. Working closely with Retail Banking leadership, Enterprise Risk Management, Compliance, Internal Audit, Finance, Operations, Information Security, and other key stakeholders, this individual will help advance a strong control environment, support audit and regulatory readiness, improve
for prose. We must preserve all substantive info, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. The posting includes EEO statement at end; we must remove that. Also "Metropolitan Commercial Bank provides equal employment opportunities..." remove. Also "MCB maintains a drug free workplace." remove. Also remove "For more information about the Bank, please visit the Bank’s website at MCBankNY.com." maybe considered boilerplate? It's not navigation but maybe considered info about bank; but it's part of description. Might keep? It's not essential to role. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. That line is not those; but it's more like a link. Might keep? It's not essential but it's not prohibited. However we can keep as part of About the Bank? There's no About the role heading. We could create an "About the role" section using Position Summary. The initial paragraph about the Bank could be considered "About the Bank" but not requested headings. The allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content accordingly. We have Position Summary -> could be About the role. Essential Functions & Responsibilities -> Responsibilities. Qualifications & Skills -> Qualifications (maybe also Skills). Preferred Qualifications & Skills could be merged into Qualifications or Skills? We could have Qualifications section with required qualifications, and Skills section with skills? But we have both Qualifications & Skills heading. The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have Qualifications and Skills separate. But we have "Qualifications & Skills" and "Preferred Qualifications & Skills". Could split: Qualifications (required) and Skills (maybe also required). Preferred could be included under Qualifications as optional? But we should not invent sections with filler. We have content for both required and preferred. Could make Qualifications section list required qualifications, and Skills section list skills (maybe from both). However the required qualifications include: 8+ years..., ability to document processes..., strong analytical..., effective written..., ability to work collaboratively..., driven by passion... Those are more like skills/qualifications. The preferred qualifications include experience with risk and control self-assessments, SOX controls, etc., knowledge of regulations, experience using GRC tools, understanding of AI tools, professional certification. Thus we could have Qualifications (required) and Skills (preferred) or combine. But we need to avoid thin sections. Perhaps better: Have Qualifications section containing both required and preferred (maybe split into sublists?). But we need to use
- for any list. Could have two lists: Required Qualifications and Preferred Qualifications within same section? Might be okay.
Alternatively, we could have Qualifications (required) and Skills (preferred). Let's do that.
Pay section: we have Potential Salary: $160,000 - $180,000 annually. Include that.
Schedule section: Standard 4-day in-office requirement, 1 day remote.
Benefits: not mentioned, so omit.
Now we need to output only HTML fragment, no /. Use
headings. Structure:
About the role
Position Summary ...
Responsibilities
- ... ... etc. We need to preserve all substantive info from Essential Functions & Responsibilities. That section includes several bullet-like paragraphs but not actual bullet list. We need to convert each sentence or clause into
- items. Must not lose detail. Let's extract the responsibilities text: "Risk & Control Governance Serve as a first line risk and control partner to Retail Banking leadership, supporting the identification, assessment, monitoring, and reporting of risks across retail products, processes, branches, digital banking activities, and operational workflows. Maintain awareness of applicable policies, procedures, regulatory requirements, and risk appetite expectations impacting Retail Banking activities. Support preparation of risk updates (including key risk indicators), control status reporting, issue summaries, policy updates, and other materials for Retail Banking management and various risk governance forums. Control Execution, Monitoring & Testing Readiness Coordinate with process owners to document, execute, and evidence key retail controls, including controls related to new account opening, dormant account monitoring, reconciliations, customer servicing, and other operational processes utilized by the Retail Banking department. Review control documentation and supporting evidence for completeness, accuracy, timeliness, and alignment with established procedures. Support management’s readiness for internal control reviews, SOX-related activities, compliance monitoring, internal audit, and regulatory examinations. Issue Management & Remediation Identify, document, and escalate control gaps, process breakdowns, emerging risks, incidents, and audit or compliance findings in a timely manner. Partner with Retail Banking process owners to develop remediation plans, define corrective actions, establish target dates, and track progress through closure. Validate that remediation efforts address root causes and result in sustainable control improvements. Risk Assessments, KRIs & Process Improvement Support retail risk assessments, risk and control self-assessments, control mapping, and key risk indicator development or refresh activities. Analyze trends in operational losses, exceptions, customer complaints, quality control results, audit findings, and other risk indicators to identify themes and improvement opportunities. Recommend practical control enhancements, process improvements, and documentation updates that support efficient operations and effective risk management. Cross-Functional Coordination Collaborate with Compliance, Enterprise Risk Management, Internal Audit, Finance, Operations, Technology, Information Security, and other control partners to support Retail Banking risk priorities. Assist with policy, procedure, and training updates that affect Retail Banking controls, customer-facing processes, and operational risk management. Promote a culture of accountability, timely escalation, and control ownership within the Retail Banking business." We need to turn each of these sentences into
- . Keep the subheadings? Could keep them as part of list items or maybe as inside
- . But we should not add extra headings inside list? It's okay to have
- containing bold text. We'll preserve the content. Now Qualifications (required) from "Qualifications & Skills" paragraph: "8+ years of retail banking operations, branch processes, customer account servicing, operational risk, and internal control concepts. Ability to document processes, identify control gaps, assess risk impacts, and recommend practical remediation actions. Strong analytical, problem-solving, organizational, and follow-up skills with attention to detail and deadlines. Effective written and verbal communication skills, including the ability to translate risk and control issues into clear business language. Ability to work collaboratively with business partners, control functions, and senior stakeholders while maintaining independence of thought and appropriate escalation discipline. Driven by a passion and curiosity to continuously learn how various technological systems, including AI, can enhance the work performed within Retail Banking risk and control environments." We'll make each bullet. Preferred Qualifications & Skills: "Experience with risk and control self-assessments, SOX controls, issue management, audit remediation, control testing, or compliance monitoring preferred. Knowledge of banking regulations and expectations relevant to retail banking operations, including deposit account opening, customer servicing, complaints, fraud risk, and operational controls preferred. Experience using GRC tools (e.g., Riskonnect, AuditBoard), workflow, reporting, or data analysis tools preferred. Understanding of, or demonstrated interest in using, Artificial Intelligence tools such as Microsoft Copilot to improve productivity, analysis, documentation, and risk management processes preferred. Professional certification such as CRCM, CIA, CRMA, CERP, or similar risk, compliance, audit, or banking certification is a plus." We'll make list. Pay section:
Pay
Potential Salary: $160,000 - $180,000 annually
Schedule section:Schedule
Standard 4-day in-office requirement, 1 day remote (of your choosing and subject to manager’s approval)
Now About the role: Use Position Summary paragraph(s). There's also introductory paragraph about the Bank before Position Summary. Should we include that? It's about the Bank, not the role. The instruction: "Usefor section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It doesn't forbid other headings, but we should stick to those. The About the role section should contain the Position Summary. Could also include a brief about the Bank? Might be considered extra but not prohibited. However we should preserve all substantive information. The introductory paragraph about the Bank is substantive about the company. Should we include it? It could be placed before About the role as a
without heading. That's allowed. The instruction: "Output ONLY the HTML fragment — no /, no markdown code fences." So we can include a
about the Bank before the headings. That preserves info. Thus we will output:
Come Work With Us Metropolitan Commercial Bank (“MCB” or the “Bank”) is a New York City–based, full-service commercial bank providing tailored banking solutions to businesses, institutions, and individuals. Founded in 1999, MCB operates banking centers in Manhattan and Boro Park, Brooklyn, within New York City, as well as in Great Neck on Long Island, New York, and Lakewood, New Jersey. The Bank recently expanded to Miami, Florida with their newest Brickell banking center. Metropolitan Commercial Bank offers a comprehensive suite of commercial, business, and personal banking products and services to small businesses, middle-market and corporate enterprises, private and public institutions, municipalities, and local government entities. The Bank has earned national recognition for its financial performance, innovation, and strategic growth. The Bank was named one of Newsweek’s Best Regional Banks in 2024 and 2025. Additionally, MCB recently received Editor’s Choice recognition at the Banking Tech Awards USA for Digital Onboarding & Omnichannel Banking and in 2026, the Bank earned Great Place To Work certification and received the Web Award Standard of Excellence for MCBankNY.com. We are a client-focused organization that values technological innovation and excellence. A strong technical mindset, AI fluency, and adaptive skills are essential for our employees to effectively contribute to our mission and drive our success. We foster human–AI teaming and strong governance to ensure technology is used responsibly and in alignment with Bank policies and procedures. For more information about the Bank, please visit the Bank’s website at MCBankNY.com.
ThenAbout the role
Position Summary The Business Risk & Control Officer (Retail) is a high-impact opportunity to help shape and strengthen first line risk management within a dynamic Retail Banking business. This role will be central to building practical, sustainable controls; identifying and addressing emerging risks; and driving improvements across retail operations, products, processes, and customer-facing activities. The position is ideal for a proactive risk professional who enjoys solving problems, partnering with business leaders, and making risk management and compliance frameworks a practical enabler of safe, effective growth. Working closely with Retail Banking leadership, Enterprise Risk Management, Compliance, Internal Audit, Finance, Operations, Information Security, and other key stakeholders, this individual will help advance a strong control environment, support audit and regulatory readiness, improve