Business Controls Senior Associate - Third Party

Make banking a Fifth Third better® We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank. GENERAL FUNCTION: As first line of defense, conducts analysis related to identifying, assessing, mitigating, and managing risks necessary to comply with new or changing laws, regulations, regulatory guidance, and best practices deemed necessary by key stakeholders (such as Third Party Management, Legal, Information Security, Compliance, Enterprise Risk and Audit partners). Supports Business Controls in advancing risk management, structure, processes, and tools in support of the organization’s Enterprise Risk Management (ERM) framework. Transforms data into business intelligence by developing and presenting information and insights to stakeholders. Monitors and manages risks to ensure compliance and validation of program effectiveness with assigned line of business or functional area, and Bancorp initiatives. Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank’s and LOB’s risk appetites, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types. ESSENTIAL DUTIES AND RESPONSIBILITIES: Assist Business Controls leadership with the development and implementation of controls, policies, procedures, and risk mitigation strategies. Provide expertise related to the identification, assessment, monitoring, testing, and reporting of operational, compliance, information security, and third-party risks. Conduct third-party due diligence activities, including onsite assessments, site visits, assurance reviews, and risk assessments. Travel domestically and internationally to perform onsite third-party assessments and evaluate compliance with Bank requirements. Review assurance reports, including SOC 1, SOC 2, ISO SoA, audit reports, and other compliance documentation. Perform third-party risk assessments to evaluate third-party compliance with internal policies, contractual obligations, regulatory requirements, and industry standards. Review contracts and security requirements to assess third-party obligations, risks, and control expectations. Evaluate information security controls, data privacy controls, restricted environments, and secure workflow processes. Review vulnerability management programs, vulnerability assessments, penetration testing results, and remediation activities. Support ongoing monitoring activities, periodic reassessments, and third-party lifecycle management processes. Investigate and assist with root cause analysis for control failures, operational losses, audit findings, and risk events. Support issue management activities, including remediation tracking, validation of corrective actions, and issue closure. Identify control breakdowns, process inefficiencies, and risk exposures and recommend corrective actions. Support internal audits, external audits, regulatory examinations, and compliance reviews. Monitor and assess compliance with applicable laws, regulations, standards, and industry best practices, including OCC Heightened Standards. Build and maintain effective relationships with Third-Parties, Business Partners, Legal, Compliance, Enterprise Risk, Information Security, and Internal Audit. Coordinate risk assessments, control reviews, issue remediation efforts, and governance activities across multiple stakeholders. Maintain assessment, issue, exception, and risk documentation within Archer, Coupa, Power BI, and other governance tools. Assist with regulatory change management activities and the implementation of new risk management requirements. Participate in escalated supplier-related issues and