First Line Risk Manager

We need to output HTML fragment with sections: About the role (description), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title. Must not include Job ID etc. Remove boilerplate: EEO, equal-opportunity, scam-warning, navigation, cookie, legal, etc. Also remove "Posting End Date". Also remove "Why Work for Us"? That's maybe not required but could be considered boilerplate? It's not listed as required to remove but it's not part of sections; we can drop it. We need to preserve all substantive information. Let's parse content: Description: first paragraph: "As a First Line Risk Manager supporting the Treasury and Wholesale Payments division in Commercial Banking, you will serve as the primary execution lead for risk and control activities across assigned products, processes, and services for Treasury & Wholesale Payments products that include but may not be limited to deposits, Liquidity, and Cash Management services. You will be responsible for executing control monitoring and testing programs, maintaining risk and control inventories, performing risk assessments, managing issues through remediation, and supporting the overall effectiveness of the first-line control environment. This role serves as the operational pillar of the risk organization, partnering closely with business stakeholders and Senior Risk Managers to ensure risks are identified, controls are effectively monitored, issues are remediated, and governance requirements are met. The Risk Manager will maintain a deep understanding of business processes and control frameworks while providing actionable insight into control effectiveness and operational risk exposure. Success in this role requires strong analytical skills, attention to detail, effective stakeholder management, and the ability to translate risk requirements into practical business solutions while maintaining a robust control environment." That's the description. We'll put under

About the role

with

. Primary Responsibilities: bullet points with percentages. We'll list as

• each bullet. Should we include percentages? Yes preserve. So each bullet includes the percentage and description. We have sections: 40% – Control Monitoring, Testing & Control Execution (multiple sentences). 20% – Business Risk Partnership & Governance Support. 20% – Process, Risk & Control Inventory Management. 15% – Issue Management & Remediation. 5% –Risk Activities (note formatting). We'll keep. Experience – Minimum Required: list bullet points? It's a paragraph with multiple sentences. We'll treat as
  • each sentence? Could be list. The instruction: Use
    • for any list of duties/requirements/benefits. Experience is a list of requirements. So we can make list items. Core Skills And Competencies: list of tools etc. We'll list as
      • . Work Authorization: sentence about sponsorship. That's a requirement? Could be under Requirements? It's a condition. We'll include maybe under Requirements as a list item. Education & Certifications: Bachelor’s degree required (Accounting, Finance, Business Administration preferred) Certifications preferred: CIA, APRP, CFE, AAP. We'll list. Hours & Work Schedule: Hours per Week: 40; Work Schedule: Monday-Friday; Hybrid presence: 4 days on-site, 1 day remote; Locations: Boston, MA; or Johnston, RI. This is schedule info. We'll create a Schedule section with
        • . Pay Transparency: salary range $90,000- $110,000 per year, plus opportunity to earn annual discretionary bonus. Additional details about factors. Also mention benefits: competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note about PTO policy exceeds mandatory. Also link to benefits. We'll create Pay section with salary range and bonus. Benefits section with list of benefits. We must not include sections with filler like "commensurate with experience". Not present. We must not include duplicated lines. Ensure we don't repeat. We must not include boilerplate: EEO, equal-opportunity, scam-warning, "Why Work for Us", "Posting End Date". Also remove "Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States." That's part of benefits description; we can keep as part of benefits but it's not boilerplate? It's a statement about PTO policy; it's substantive. Keep. We must not include "For an overview of our benefits, visit https://jobs.citizensbank.com/benefits" maybe we can keep as link? It's not boilerplate but it's a reference; we could keep as part of benefits. Probably okay. We must not include "Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance." That's boilerplate? It's about salary guidance; could be considered not essential but it's about pay. Might be considered filler? It's not specific to the role; it's generic. Safer to drop. We must not include "Equal Employment Opportunity" paragraph. Remove. We must not include "Why Work for Us" paragraph. Remove. Now construct HTML. Structure:

          About the role

          ...

          Responsibilities

          • 40% – Control Monitoring, Testing & Control Execution: Execute risk-based control monitoring and testing activities across assigned products, processes, and services and evaluate control design, adequacy and effectiveness; Develop and maintain control assessment schedules and testing plans aligned to established risk assessment methodologies and ensure assessment activities are completed within established timeframes; Execute continuous monitoring activities utilizing key risk indicators, key control indicators, data analytics, and automated monitoring techniques; Evaluate control effectiveness and provide recommendations to strengthen the control environment; Document testing outcomes, root causes, and remediation actions to support risk mitigation and continuous improvement.
          ... etc. each bullet. We need to keep the content exactly as given but can combine sentences with semicolons? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. We can keep as separate sentences within
          • . Using semicolons is okay as it's still same info. Might be considered summarizing? It's still same content. Safer to keep each sentence as separate
          • ? But then we would have many
          • under Responsibilities, which is okay. However the instruction: Use
            • for any list of duties/requirements/benefits. So each duty can be a list item. The original responsibilities are grouped under percentages with multiple sentences each. We could treat each percentage group as a list item containing multiple sentences. That preserves detail. We'll do that. Thus each
            • contains the percentage heading and the sentences. Similarly for Experience, Core Skills, etc. Now Benefits: list items. Pay: maybe just

              with salary range and bonus. Schedule: list items. Now ensure no extra sections like Qualifications? The posting has Education & Certifications which could be Qualifications. We'll make a Qualifications section containing Education & Certifications. Requirements: maybe Experience and Work Authorization etc. We'll make Requirements section containing Experience – Minimum Required and Work Authorization. Skills: Core Skills And Competencies. Now produce HTML. Let's craft. About the role paragraph: copy exactly. Check for any boilerplate within: "Success in this role requires strong analytical skills, attention to detail, effective stakeholder management, and the ability to translate risk requirements into practical business solutions while maintaining a robust control environment." That's fine. Now Responsibilities: We need to copy each bullet exactly as in posting: "40% – Control Monitoring, Testing & Control Execution Execute risk-based control monitoring and testing activities across assigned products, processes, and services and evaluate control design, adequacy and effectivenessDevelop and maintain control assessment schedules and testing plans aligned to established risk assessment methodologies and ensure assessment activities are completed within established timeframesExecute continuous monitoring activities utilizing key risk indicators, key control indicators, data analytics, and automated monitoring techniques.Evaluate control effectiveness and provide recommendations to strengthen the control environment.Document testing outcomes, root causes, and remediation actions to support risk mitigation and continuous improvement." Note there are missing spaces after periods. We'll preserve as is but maybe add spaces for readability? Changing punctuation could be considered altering detail? Safer to keep exactly as given, but we can add spaces after periods to make readable without altering meaning? Might be considered altering. I'd keep as is but it's hard to read. However we can keep the text exactly; the missing spaces are part of the original. We'll keep. Similarly for other bullets. Let's copy each bullet exactly: From posting: "40% – Control Monitoring, Testing & Control Execution Execute risk-based control monitoring and testing activities across assigned products, processes, and services and evaluate control design, adequacy and effectivenessDevelop and maintain control assessment schedules and testing plans aligned to established risk assessment methodologies and ensure assessment activities are completed within established timeframesExecute continuous monitoring activities utilizing key risk indicators, key control indicators, data analytics, and automated monitoring techniques.Evaluate control effectiveness and provide recommendations to strengthen the control environment.Document testing outcomes, root causes, and remediation actions to support risk mitigation and continuous improvement." "20% – Business Risk Partnership & Governance Support Partner with business stakeholders to remain informed of operational changes, emerging risks, and control environment impacts.Provide risk and control guidance to business partners during implementation of process changes and remediation efforts.Support internal audits, compliance reviews, examinations, and control assurance activities through delivery of documentation and evidence.Assist with risk reporting, metrics, and management presentations." "20% – Process, Risk & Control Inventory Management Maintain risk, control, test, and process inventories within governance systems.Identify and document risks and controls within process maps and support ad hoc inventory updates.Execute Risk and Control Self-Assessments (RCSAs) and support ongoing risk identification activities.Ensure alignment between risks, controls, procedures, policies, issues, and supporting documentation.Maintain data integrity and inventory quality across risk management platforms." "15% – Issue Management & Remediation Author, track, validate, and report on risk and control issues through remediation and closure.Support issue impact assessment through qualitative and quantitative analysis, root cause analysis activities, and challenge remediation plans to ensure sustainable corrective actions.Execute monthly governance and risk control updates within GRC platforms.Monitor issue trends and identify emerging control concerns requiring escalation." "5% –Risk Activities Maintain understanding of regulatory, and internal policy requirements.Demonstrates the ability to analyze and interpret policies, procedures, and regulatory requirements, applying sound judgment to assess compliance, identify risks, and provide clear, actionable guidance. Escalate material control concerns and emerging risks to senior risk leadership.Identify opportunities for use of AI for risk program enhancements." Note there is a missing space after "5% –Risk". We'll keep. Now Experience – Minimum Required: paragraph: "Experience – Minimum Required 4-6 years Risk Management Experience Demonstrated experience supporting and/or leading risk projects across multiple business lines offering a wide variety of financial services products and services, with particular focus on Treasury & Wholesale Payment products and services, including but not limited to Deposit, Liquidity and Cash Management Products and Services. Understanding of the regulatory environment and how the risks of the products and services the bank offers are viewed by the Second Line of Defense and regulators. Ability to constructively work both independently and in collaborative environments involving all levels of management and employees Ability to use data and metrics to back up assumptions, recommendations and drive actions Experience in business domains such as risk management, audit, compliance, Payments / Deposits / Cash Management Products and ServicesEffective project management and analytical skills Strong interpersonal and team building skills Ability to build and expand trusting relationships and partnerships" We need to preserve. It's a bit run-on. We'll keep as is inside

            • . Now Core Skills And Competencies: "Knowledge of GRC Archer, JIRA, Analytics and Reporting tools (Tableau), AI scripting and prompting (Microsoft Co-Pilot), Microsoft product suite (Word, Excel, PowerPoint)". We'll keep. Work Authorization: "At this time, Citizens is not able