As a Legal Oversight and Control Manager you will become a member of the Legal Oversight & Controls team and play a pivotal role in enhancing the Legal organization's control environment! This position demands expertise in risk and control management, including real-time detection of control issues, escalation processes, root cause analysis, and remediation strategies. Familiarity with second line of defense (2LOD) compliance and third line of defense (3LOD) internal audit best practices is highly preferred. Key responsibilities include managing the issue and action plan remediation lifecycle, conducting post-closure validation of action plans, and leveraging IT applications and intelligent systems solutions. You will also be involved in identifying, creating, and monitoring key performance indicators (KPIs), conducting risk and control assessments, and engaging with AI and machine learning applications. Additionally, you will support the Firm’s Control Testing Center of Excellence (TCoE) function. Your role will involve applying the firm-wide risk and controls framework to strengthen the control environment in alignment with the CORE program. If you are a strong critical thinker with a passion for data analysis, risk and control evaluation, and mitigation, and aspire to be a trusted control advisor, this is the perfect opportunity for you!
Job responsibilities
- Apply the firm wide risk and controls framework for strengthening the control environment in adherence to the CORE program to include intelligent solutions and control key performance indicator (c-KPI) identification/creation/monitoring
- Working with Process Subject matter experts (SMEs), design and implement controls to mitigate operational risk. Support the Testing Center of Excellence to ensure appropriate and effective controls are in place and are operating as designed to ensure the continuing integrity, relevance and proper design and performance of the control environment to minimize risk exposure to Legal and the firm
- Partner with the process owners to be compliant with the Firm-wide programs i.e. mapping of legal obligations, intelligent solutions, compliance groups, legal entity tagging to processes identified with operational risk housed in the system of record
- Partner with the process owners to be compliant with the Firm-wide programs i.e. mapping of legal obligations, intelligent solutions, compliance groups, legal entity tagging to processes identified with operational risk housed in the system of record
- Perform pre-Audit (3rd line of defense) and Compliance (2nd line of defense) readiness reviews with Process Owners to ensure satisfactory outcome
- Engage with control colleagues across the firm, business, operations management, legal, compliance, risk, audit, regulators and technology control functions
Required qualifications, capabilities, and skills
- Minimum 5 years of relevant experience in Risk Management, Issue and Action Plan remediation, Audit, Compliance, or related discipline.
- Knowledge of operational risk framework including but not limited to performing walkthrough with Process Owners, conducting process risk assessment, control identification, design and performance evaluations, issue and action plan management, legal obligation mapping, control key performance indicator (c-KPI) identification.
- Knowledge of CORE or other risk & control assessment methodologies or other control frameworks a plus
- Advanced Microsoft Office, Excel, Word and PowerPoint
- Bachelor’s Degree
Preferred qualifications, capabilities, and skills
- Possess sense of urgency, intellectual curiosity, flexibility in shifting and competing priorities and deliverables, problem solving skills with ability to propose meaningful recommendations and provide guidance to stakeholders as required
- Advanced Microsoft Office, iManage, SharePoint skills and capabilities.
- Technology controls lifecycle assessment to include Artificial Intelligence & Machine Learning
- Experience as user of intelligent solution technologies such as Tableau or related platforms, a plus
- Experience with iManage, SharePoint and related capabilities.