Business Risk & Controls Advisor-Tech/Cyber

About the Role

This position advises the Technology or Cyber Business Unit (BU) on risk activities in alignment with the Company’s Risk Appetite and Corporate Strategy. It supports the management of technology or cyber business risks and controls across all risk types, ensuring adherence to risk policies, standards, procedures, and program requirements. The role provides advisory services to manage risks, facilitates communication between Technology or Cyber teams, the 2nd & 3rd lines of defense, and regulators, and helps drive shared departmental goals.

Responsibilities

• Business Risk & Controls Knowledge and Expertise – Develops and maintains a deep understanding of the organization’s business environment, including industry markets, products, services, client base, and competitive landscape. Analyzes and interprets business trends, drivers, and external factors (e.g., regulatory changes, market disruptions) to identify risks and operationalize 2nd line requirements.
• Business Risk Management Support – Supports the execution of risk policies, standards, and procedures within the BU. Identifies risks and control gaps, tracks and resolves issues, and ensures timely escalation and remediation. Collaborates with stakeholders to develop and execute mitigation strategies, monitors remediation efforts, and aligns with broader risk management objectives.
• Regulatory and Internal Audit Engagement – Supports regulatory and internal audit inquiries, examinations, and audits. Assists in developing regulatory submissions, responses, and reporting requirements to ensure accuracy, completeness, and timely submission.
• Risk Governance & Reporting – Defines BU risk reports to provide a comprehensive view of risks impacting the BU. Monitors risk and control performance, summarizes top and emerging risks, and escalates key indicator breaches as required by the Risk Appetite Framework (RAF). Advises senior leadership in risk governance meetings and collaborates on governance documents to manage risk.

Qualifications

• Minimum Education and Experience:
  • Bachelor’s Degree and 4 years of experience in Financial Services, First Line Risk Management, Enterprise Risk, or Operations Risk, or
  • High School Diploma or GED and 8 years of experience in Financial Services, First Line Risk Management, Enterprise Risk, or Operations Risk.
• Preferred Education and Experience:
  • Degree in Finance or Risk Management.
  • Experience in Project Management, Internal/External Consulting, or prior work in a Technology or Cyber Risk Organization.
• Preferred Certifications: CRCM, PMP, CERP, CAMS, ISACA CISA, ISACA CRISC-IO, CISM, or AAIA certification.
• Skills:
  • Knowledge of risk techniques, practices, and control frameworks.
  • Understanding of banking and government regulatory requirements and processes.
  • Familiarity with regulatory guidance on enterprise and operational risk.
  • Ability to work effectively with associates, senior management, and committees.
  • Proficiency in MS Office.

Pay

The base pay for this position generally ranges between $140,000 and $155,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors. Total compensation may also include variable incentives, bonuses, benefits, and other awards as outlined in the offer of employment.

Benefits

First Citizens Bank offers a competitive benefits program designed to meet the needs of associates. More information can be found at https://jobs.firstcitizens.com/benefits.