The Business Control Analyst (BCA) is responsible for supporting the Business Control Manager (BCM). This includes, but is not limited to, performing control tests as part of the RCSA process, working with their business partners to address ineffective controls and control gaps and working with the Issue Management team to address identified issues. This role also assists the BCM in their risk and control initiatives and are mentored for movement into a BCM position.


Responsibilities:

• Assists BCM in the continuous monitoring of new issues, Quality Assurance, Quality Control, and Compliance testing to determine underlying control deficiencies/breakdowns
• Ensures proactive identification of materialized issues
• Works with BCM and Issue Management team to evaluate new issues to determine business response based on business risk appetite and Cenlar Issue Management guidelines
• Assists, as needed, with the creation of remediation Management Action Plans (MAP) and MAP activities to address root cause of open issues or linkage to pre-existing MAPs when appropriate
• Prepares and processes Risk Acceptance requests
• Works with BCM and Issue Management team to ensure closed issues successfully passing AVT Validations and Sustainability. Demonstrates improved controls as a result of closed issues
• Updates Cenlar's risk system of record (ProcessUnity)
• Identifies and escalates emerging risks
• Assists the BCM to provide control design advice and change management in response to changes in business process, technology, or compliance requirements
• Responds to Client requests (Client Audit Support/Client Management) in a timely manner
• Supports the BCM with active engagement with internal/external risk stakeholders (Audit, Compliance, Regulatory Change Management, Enterprise Change Management, Issues Management, Oversight & Control, QA/QC, P&P, AVT)
• Liaises with Cenlar's Policies and Procedures (P&P) team to ensure risks and controls are appropriately reflected within procedures
• Coordinates management responses into MAPs for submission to auditors and examiners
• Liaises with testing partners (QA, QC, Compliance) to analyze root cause of testing results and suggest remediation activity
• Liaises with Audit validation team to satisfy evidence requests for validating remediated issues. Coordinates business walkthroughs and any subsequent updates in Process Unity, as appropriate
• Assists the BCM and Issue Management team as assigned
• Appropriately assess risk when business decisions are made, include but not limited to compliance and operational risk. Demonstrate consideration for Cenlar's reputation as well as our clients, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards

• Evaluates and performs testing of the design and operating effectiveness of Technology controls, updating the IT Business Control Manager and IT Business Control Director with progress and observations
• Supports the IT Business Control Manager during Technology Risk and Control Self-Assessments including identifying, assessing and documenting risks and controls and completing testing
• Supports the IT Business Control Manager in writing high quality risks and control descriptions as part of creating and editing the Technology risks and controls matrix
• Supports the IT Business Control Manager in providing suggestions to management for actions to address Technology control issues
• Recommends practical ways of improving the work the Technology business functions do and applying where appropriate

• Bachelor's degree or equivalent experience
• 3 to 5 years of relevant mortgage servicing experience
• Ability to demonstrate understanding of risk management and internal control principles, including what constitutes effective control design
• Ability to analyze and provide a credible challenge of the effectiveness of risk management and internal controls within the Issues Management process
• Effective communication skills, both oral and written, and the ability to communicate at all levels of the organization
• Process improvement and project management skills are a plus

• Technology professional certification a plus (e.g., CISA, CRISC, CISM, CISSP)
• IT auditing experience a plus
• Understanding of IT process mapping preferred
• Cloud security risk and control knowledge a plus