IT Business Controls Associate - Digital Channels

Fifth Third Bank is on an exciting digital modernization journey, transforming how millions of customers bank through innovative digital channels, cloud-native platforms, and modern engineering practices. We are looking for an Associate-level team member to support our Digital Channels and cloud-based platforms, including AWS-powered customer-facing and enabling services.

This role sits at the intersection of digital product delivery, cloud technology, and enterprise risk management, partnering closely with product and technology teams to ensure innovation happens securely, responsibly, and within risk appetite.

As first line of defense, conducts analysis related to identifying, assessing, mitigating, and managing risks necessary to comply with new or changing laws, regulations, regulatory guidance, and best practices, with a primary focus on Digital Channels, cloud platforms, and supporting technologies. Supports Business Controls in advancing risk management structures, processes, and tools in support of the organization’s Enterprise Risk Management (ERM) framework.

This role partners with stakeholders across Digital, Technology, Product, Legal, Compliance, Enterprise Risk, and Audit to support transparency and understanding of digital operating issues, technology risks, and control effectiveness. Transforms data into business intelligence by developing and presenting information and insights to stakeholders. Monitors and manages risks to ensure compliance and validation of program effectiveness for assigned lines of business, functional areas, and Bancorp initiatives.

Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for doing the right thing for customers and colleagues, ensuring actions and behaviors support a secure, resilient, and positive digital customer experience. While operating within the Bank’s and LOB’s risk appetites, supports effective identification, assessment, monitoring, and reporting of risks of all types.

• Assists Business Controls leadership with the development and execution of strategies, controls, policies, and procedures to increase effectiveness and efficiency related to digital channels, cloud platforms, and technology-enabled processes.

• Provides analysis and subject matter support related to the identification, assessment, control, monitoring, testing, and reporting of technology, cloud, product, third-party, and operational risks.

• Investigates and assists with root cause analysis in instances of actual or potential operational loss, including those related to digital platforms or technology processes.

• Gathers, analyzes, aggregates, and reports risk and control data to support solutions to analytical, implementation, and execution challenges.

• Prepares reports, dashboards, and presentations to communicate key milestones, risks, control gaps, and remediation status to management and internal partners.

• Maintains awareness of industry best practices, regulatory guidance, and emerging risks related to digital banking, cloud computing, cybersecurity, and technology operations, including OCC Heightened Standards.

• Supports the resolution of internal audit, compliance, and risk management issues that may impact the classification, availability, integrity, or resiliency of digital and cloud-based processes.

• Identifies and escalates control breakdowns, inadequate processes, or unexpected events, and supports corrective action efforts in partnership with Business Controls leadership.

• Builds effective working relationships with internal business control groups and the Second and Third Lines of Defense (Legal, Compliance, Enterprise Risk, Cybersecurity, and Audit).

• Collaborates with teams responsible for information barriers and data governance to ensure appropriate controls over the flow of sensitive information.

• Assists in the execution of regulatory change management activities impacting digital delivery, technology platforms, data, and cloud services.

• Partners with business and technology managers to support issue remediation in alignment with the Bancorp’s issue management framework.

• Assists with maintenance and updates to risk and control systems and repositories (e.g., OpenPages, PPM, or similar tools).

• Supports Risk and Control Self‑Assessment (RCSA) activities, including facilitation support, documentation, and ratings.

• Assists with identification of inherent risks and controls for digital products, platforms, and processes, and supports governance alignment.

• May assist with associating loss events to applicable risks/processes and coordinating root cause analysis and action plan development.

• Partners with Support Functions and Risk Experts to identify applicable Enterprise and Risk Appetite indicators related to technology and digital risk.

• Supports threshold evaluation, proposed indicator changes, and documentation in appropriate tools or systems.

• Actively participates in issue remediation and validation activities.

• Executes assigned components of the ERM Scenario Analysis program, including technology, cyber, and digital disruption scenarios.

• Supports development and maintenance of digital product and platform inventories and assists with ERM product risk review activities.

• Performs additional duties as assigned, including support for special projects, new risk programs, regulatory initiatives, or acquisition-related activities.

• Bachelor’s degree in a related field or equivalent experience required; degree in Computer Science, Cyber Security, Information Systems, or a technology-related field preferred. Master’s degree preferred.

• 3–5 years of experience in financial services, risk management, business controls, technology risk, or compliance.

• Strong analytical skills with the ability to interpret and apply policies, standards, and regulations across a complex, technology-driven organization.

• Working knowledge of digital platforms, cloud computing concepts, and technology-enabled business processes.

• Ability to communicate effectively, both verbally and in writing, with discretion and professionalism.

• Collaborative, approachable, and able to build trusted relationships across business and technology teams.

• Comfortable working in a fast-paced, evolving environment with shifting priorities.

• Ability to work independently with minimal supervision.

• Working knowledge of Microsoft Office products required.

Preferred certifications include one or more of the following:

• AWS Certified Solutions Architect or AWS Certified Security – Specialty

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Certified Information Systems Auditor (CISA)

• Certified Cloud Security Professional (CCSP)

• Certified in Risk and Information Systems Control (CRISC)

• ITIL, COBIT, or other technology risk, audit, or governance-related certifications