First Line Risk & Control Officer

First Horizon Bank; Charlotte (NC); On-site; USD 110,000 - 170,000; Full time

Job summary

First Horizon Bank is seeking a The First Line Risk & Control Officer to collaborate with business leaders and control owners, partnering with 2LOD and 3LOD to sustain a strong first line risk environment.

The role blends shaping the function by designing risk programs, documenting processes, strengthening the control inventory, and establishing assessment cycles, with managing risk in live operations by driving issue closure, escalating events, and supporting regulatory inquiries.

Responsibilities

• Issues management. Execute the first line issue lifecycle for assigned areas, including intake and validation, root cause analysis, action plan design, owner assignment, tracking, escalation of aging or at‑risk items, closure evidence, and sustainability validation.
• Risk event management. Capture, triage, and elevate operational risk events within established thresholds and required timelines; perform root cause analysis; route events into the issue program where a control failed or was absent; and support thematic analysis across the event population.
• Risk and control self‑assessment (RCSA). Document the process universe for assigned areas, perform process‑to‑risk‑to‑control mapping, assess residual risk with the business, and drive control gaps and weak ratings into active remediation on a risk‑based cadence under the enterprise methodology.
• Controls management. Apply first line control standards, prioritizing higher‑risk controls; document control design; confirm accountable owners; maintain inventory accuracy in the system of record; and support assessment of design and operating effectiveness.
• Business partnership and proactive risk identification. Serve as a

Job description

Location: On site at location listed in job posting.

SUMMARY

The First Line Risk & Control Officer role sits within the first line of defense, working directly with business leaders and control owners and partnering with the second (2LOD) and third (3LOD) Lines of Defense to build and sustain a strong first line risk and control environment.

The role blends two complementary responsibilities. The individual helps shape the function itself by supporting the design of risk and control programs, documenting processes, strengthening the control inventory, establishing assessment cycles, and contributing to reporting that gives leadership a clear view of the risk profile. In equal measure, the individual manages risk in a live operating environment by driving issues to timely closure, escalating and analyzing operational risk events, responding to regulatory and audit inquiries, and serving as a trusted risk partner to the business.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Issues management. Execute the first line issue lifecycle for assigned areas, including intake and validation, root cause analysis, action plan design, owner assignment, tracking, escalation of aging or at‑risk items, closure evidence, and sustainability validation. Run recurring issue owner meetings and prepare closed items to withstand second line challenge, audit review, and regulatory examination.
• Risk event management. Capture, triage, and elevate operational risk events within established thresholds and required timelines; perform root cause analysis; route events into the issue program where a control failed or was absent; and support thematic analysis across the event population.
• Risk and control self‑assessment (RCSA). Document the process universe for assigned areas, perform process‑to‑risk‑to‑control mapping, assess residual risk with the business, and drive control gaps and weak ratings into active remediation on a risk‑based cadence under the enterprise methodology.
• Controls management. Apply first line control standards, prioritizing higher‑risk controls; document control design; confirm accountable owners; maintain inventory accuracy in the system of record; and support assessment of design and operating effectiveness.
• Business partnership and proactive risk identification. Serve as a