Sr. Data Risk and Controls Analyst (Remote)

First Citizens Bank; Scottsdale (AZ); Remote; USD 130,000 - 160,000; Full time

Job summary

First Citizens Bank is seeking a Senior Data Risk & Controls Analyst for a remote role. The analyst will develop processes for managing data risks, work with data owners to remedy control gaps, and ensure compliance with frameworks like SOX and COSO. Ideal candidates will have significant experience in risk management and strong documentation abilities.

Benefits

Competitive benefits program

Qualifications

• 5+ years of experience in data governance or risk management.
• Strong understanding of control frameworks like SOX and COSO.
• Exceptional ability to produce clear process documentation.

Responsibilities

• Develop and document processes for evaluating data risks.
• Partner with application owners to identify control gaps.
• Lead and document Tests of Design and Operational Effectiveness.

Skills

Data governance

Data risk

Audit

Risk management

Documentation skills

Stakeholder management

Education

Bachelor's Degree

Tools

Visio

Confluence

JIRA

Job description

Overview

This is a remote role that may be hired in several markets across the United States.

We are seeking a highly skilled Senior Data Risk & Controls Analyst to join our Data Risk and Controls team. In this individual contributor role, you will be responsible for helping shape and execute our approach to data risk management by developing repeatable processes and working closely with application and data owners to identify control gaps, define remediation strategies, and drive execution. This role requires an experienced professional who can immediately take ownership of data risk activities.

Responsibilities

• Develop and document repeatable processes for evaluating residual data risk and identifying control weaknesses across data flows, systems, and reports.
• Partner with application and data owners to access data risks, identify control gaps and design sustainable remediation plans.
• Drive the execution of remediation efforts, including defining milestones, tracking progress, and escalating issues when needed.
• Lead and document Tests of Design (ToD) and Tests of Operational Effectiveness (ToOE) on data controls.
• Perform and maintain data control coverage assessments, defect listings, and issue tracking documentation to support enterprise risk and audit reporting.
• Provide detailed and actionable remediation plans for data defects and issues
• Collaborate across business, technology, and risk teams to ensure transparency, accountability and alignment in control remediation efforts.
• Produce high-quality process documentation and workflow diagrams to support consistency, onboarding, repeatability, and audit-readiness.
• Serve as a trusted resource and subject matter expert in data risk management, control design, and data governance practices.

Qualifications

Bachelor's Degree and 5 years of experience in Financial Services, First Line Risk Management, Enterprise Risk or Operational Risk OR High School Diploma or GED and 8 years of experience in Financial Services, First Line Risk Management, Enterprise Risk or Operational Risk

• 5+ years of experience in data governance, data risk, audit, or data control functions, ideally within a regulated industry.
• Strong understanding of control frameworks (e.g., SOX, COSO, COBIT) and risk management practices.
• Proven ability to work cross-functionally with application/data owners and develop practical, risk-informed solutions.
• Strong experience with data control assessments, defect identification, root cause analysis, and remediation planning.
• Demonstrated ability to conduct ToD/ToOE assessments and provide actionable insights.
• Exceptional documentation skills with the ability to produce high-quality, clear process flows, procedures, and remediation artifacts.
• Familiarity with data lineage, manual data entry risks, and data quality controls.
• Proficiency in tools such as Visio, Confluence, JIRA, or other workflow and documentation platforms.
• Strong communication and stakeholder management skills; able to collaborate across business, risk, and technology teams.
• Self-starter with a strong sense of ownership and urgency.

Preferred Qualifications:

• Industry certifications such as DCAM, CIMP, CRISC, or CIA.
• Experience working in a first-line risk or data governance team.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

The base pay for this position is generally between $130,000 and $160,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.