Policy and Controls Analyst
Official Title: Policy and Controls Analyst
Department: Governance
Reports To: SVP, Governance
Term: Full-time, Exempt
Summary
The Policy and Controls Analyst will assist the Senior Vice President of Governance to ensure adherence to applicable policies, laws and regulations and will provide guidance and support to the organization. The Policy and Controls Analyst will identify and assess compliance and operational risks. The position will work collaboratively and cooperatively with all departments within CampusDoor to develop, document and oversee controls that support established policies and procedures. The Policy and Controls Analyst will be responsible for evaluating audit results and operational effectiveness of specified controls designed to effectuate CampusDoor’s compliance with applicable laws, regulations and contractual obligations. The position will track results from internal and external testing and develop controls to address any identified gaps.
Essential Duties and Responsibilities
- Be a leader that sets expectations through example and in his/her conduct, ethics, diligence, integrity, problem solving and character.
- Provide subject matter expertise on Privacy and other compliance topics.
- Create and maintain a positive and professional work environment and encourage a culture of compliance.
- Acts as a central expert regarding risk governance and consult with others and advise business and corporate segments regarding good industry practice.
- Demonstrate and maintain subject matter expertise of applicable laws and regulations, such as FACTA, FCRA, GLBA, GDPR, CCPA/CPRA, CAN-SPAM, and FFIEC guidances.
- Stay abreast of changes to federal and state laws and regulations affecting the management, operations, and product offerings of CampusDoor.
- Closely follow emerging privacy trends across states and internationally, including new privacy laws, trends, and risks.
- Support regulatory compliance and escalate matters that require follow-up or investigation.
Policy Development and Implementation
- With the SVP of Governance, manage the design, delivery and continuous improvement of the Compliance Management Program.
- Perform privacy risk assessments and other assessments as needed to determine the need for additional controls or changes to enforcement of existing controls.
- Create, revise and disseminate written policies, procedures, and control objectives related to compliance activities and for CampusDoor as a whole.
- Work with first line of defense to ensure that consumer compliance requirements and monitoring controls are included in the business processes of the first line of defense.
- Track and monitor the annual compliance management program, including annual reviews, internal testing verification, risk assessments, and external IT and compliance testing.
- Review complaints generated within the business, identify actionable items and develop recommendations to address the root cause of complaints.
- Establish and maintain relationships with lender representatives on compliance issues, as delegated by the SVP, Governance. Present reports, findings, and updates to lender representatives, as delegated by the SVP, Governance.
- Foster ongoing contact with all levels of the business to maintain knowledge about day-to-day operations, in order to provide appropriate advice and guidance on compliance-related and operational issues.
- Oversee the efforts of business units and other risk areas in the development and implementation of policies, procedures and processes to minimize compliance risks.
- Deliver accurate, complete, and timely reports, audits and other deliverables to SVP, Governance and senior management.
Qualifications
- 5+ years of experience in a risk or compliance role within the lending industry or equivalent coursework.
- Bachelor’s Degree desired. Relevant advanced degree is a plus.
- Compliance experience with a regulated financial services entity (OCC, OTS, FDIC, Federal Reserve, CFPB) is preferred.
- Certified Regulatory Compliance Manager (CRCM) or equivalent is preferred.
- Knowledge, ability and expertise in compliance and a broad understanding of financial services.
- Advanced understanding of risk management processes and risk analysis.
- Proven organizational skills with the ability to concurrently manage projects and people while maintaining a high level of responsiveness and attention to detail.
- Critical thinker with the ability to spot issues and use good judgement to resolve issues or propose sound solutions.
- Excellent verbal and written communication skills and able to work with and influence all levels of the company.
- Able to manage ambiguity and make decisions without clearly defined established processes or practices.
- Strong judgment, influencing skills, integrity, and discretion in handling highly sensitive issues.