VP - Business Control & Unit, EUC
About the role
It Starts Here
The Difference You Make
Monitor activities to minimize the Corporate & Investment Bank's exposure to operational, compliance, legal, regulatory, information, and technology risk. Leads First Line of Defense governance for records management across BSNY and SanCap and coordinates CIB US End User Computing risk-management activities. Ensures that records and EUCs are identified, inventoried, controlled, retained, protected, monitored, reported, and remediated in accordance with company standards and applicable legal and regulatory requirements.
The Sr. Associate must be able to effectively collaborate with various stakeholders while influencing strategic goals.
- Serve as the First Line of Defense Records Management Office for BSNY and SanCap, governing program strategy, administration, and compliance.
- Maintain entity procedures, process maps, records-inventory standards, record-type elements, and controlled change practices.
- Oversee Records Management Coordinators, maintain the coordinator roster, lead coordinator forums, and coordinate annual business-unit inventory reviews.
- Partner with Legal, Compliance, Risk, and the business to maintain the Records Retention Schedule and approve inventory changes and new record types within RMO authority.
- Oversee the records lifecycle, including creation, classification, storage, retrieval, retention, legal holds, offsite storage, defensible disposition, and organizational transfers.
- Deliver training and awareness; integrate requirements into RCSA and common-control testing; monitor exceptions, deficiencies, risk acceptances, and remediation.
- Escalate noncompliance through Issue Management and report program compliance, control effectiveness, inventories, training, exceptions, and emerging risks to governance forums.
- Serve as CIB US EUC Coordinator, supporting local procedures, semiannual inventory refreshes, control testing, biennial policy assurance, and quarterly program-health reporting.
- Partner with EUC Program Leads, entity leads, owners, managers, and Technology Risk to improve controls and escalate incomplete inventories, documentation, testing, and remediation.
- Provide credible challenge and influence senior stakeholders across BSNY, SanCap, and CIB US to deliver sustainable control improvements.
What You Bring
Education
Qualifications
- 9 or more years of relevant experience in financial services, records and information management, operational risk, business controls, technology risk, compliance, legal operations, audit, or a related discipline.
- Demonstrated experience leading a regulated records-management, information-governance, EUC, or comparable enterprise control program across multiple legal entities or business lines.
- Strong knowledge of the records lifecycle, records inventories, retention schedules, legal holds, offsite storage, defensible disposition, policy exceptions, and control monitoring.
- Working knowledge of EUC lifecycle governance, risk classification, inventory management, documentation, access, change, data-integrity, backup/versioning, control testing, and decommissioning.
- Proven ability to challenge and influence senior stakeholders and drive remediation without direct authority.
- Experience producing executive and committee-level risk reporting and coordinating with Legal, Compliance, Risk, Technology Risk, Internal Audit, and business management.
- People leadership, coaching, or cross-functional program leadership experience preferred.
Certifications
- Other: Risk Certification - Preferred.
It Would Be Nice For You To Have
- Established work history or equivalent demonstrated through a combination of work experience, training, military service, or education.
Work Authorization & Sponsorship
What Else You Need To Know
Base Pay Range
We Value Your Impact
Risk Culture
EEO Statement
To Do Next
Not included in the source posting: about the role, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.