BRCO Risk Partner Lead - Enterprise Security

BRCO Risk Partner Lead / Cloud Data Warehouse Risks

We are seeking a Cloud Data Risk Partner to support cloud-based data warehouses, data lake, data mining and AI environments. This role focuses on early lifecycle risk identification, robust control design, and continuous oversight of risk remediation activities. You'll partner with business, engineering, data, and security teams to embed strong, sustainable controls and play a key role in First Line of Defense (1LOD) challenge and issue management.

The Business Risk and Control Officers (BRCO) play a pivotal role in guiding business units to identify and understand risk exposures and the controls needed which are integral to reducing risk and safeguarding our customers and colleagues. BRCOs are members of the First Line of Defense (1LOD) in Comerica's strong Three Lines of Defense (3LoD)-centric environment. They proactively advise businesses on risks and controls. They efficiently own issue management. They support business units on risk and control audits.

Position Responsibilities:

Strategic Risk Leadership

• Guide the business in identifying and mitigating risk exposures in the data warehouse environment.
• Drive end-to-end risk lifecycle: Planning, Identification, Assessment, Mitigation, Monitoring, Reporting.
• Serve as the key 1LOD liaison to enable early, effective risk management for business applications.

Issue Management & Governance

• Proactively lead risk closure tracking, issue validation, and formal documentation for internal audit and Second Line of Defense (2LOD) alignment.
• Provide effective challenge to 1LOD colleagues where necessary to uphold control rigor.
• Analyze themes across issues to highlight emerging risks and drive preventive solutions.

Control & Compliance Advisory

• Advise on control design for cloud, Artificial Intelligence (AI), Data governance, and data warehouse platforms (like Snowflake) aligned with SOX, NIST, GLBA, HIPPA and data privacy requirements.
• Ensure controls are risk-appropriate, efficient, and aligned with regulatory expectations.
• Partner with control owners on remediation plans and validate resolution effectiveness.

Collaboration & Enablement

• Build strong relationships with data, AI working groups, cloud, infrastructure, and governance teams.
• Support education and enablement of control owners to improve risk awareness.
• Align new and evolving technologies (e.g., CI/CD, cloud-native platforms) with enterprise risk posture.

• Bachelor's Degree from an accredited university OR High School/GED and 6 years of Risk Management or other related experience in the Financial Services Industry
• 6 years of experience in Risk Management, Compliance, Audit, or related field
• Expertise in identifying areas of control weakness
• Expertise in designing or advising on the design of a broad range of controls (e.g. preventative vs. detective controls; manual vs automated)
• Strong understanding of various risk types/pillars, risk management, controls, and compliance concepts and frameworks
• Project support/project management skills - ability to provide direction, track progress and ensure alignment with program requirements
• Proficient in risk management software, MS Office Suite, and other related technology tools

About Comerica
We know our employees are critical to our overall success and we are dedicated to investing in their future. One of the ways we do this is to offer a comprehensive Total Rewards package designed to recognize and reward individual performance, as well support health, well-being, development and security for our colleagues and their family. Total Rewards consists of cash compensation, development and flexible benefit programs designed to meet individual needs today and in the future. Your salary will be commensurate with your work experience and our programs are reviewed regularly to ensure each remain competitive. We are proud to offer benefits such as health and welfare programs, strong retirement benefits, and generous paid time off programs. You and your eligible family members, including domestic partners and their children, can participate in medical, dental, and vision benefits, 401(k) and pension, income protection benefits such as life insurance, AD&D, and supplemental health programs to offset unexpected health care expenses. We also have a variety of time off programs for things like vacation, sick time, disability, and parental leave. Eligibility for some programs varies based on employment status and tenure.

Upon offer, Comerica conducts a comprehensive background and fingerprint check.

NMLS certification requirement: where applicable, a favorable background check screening, credit check, fingerprint check, and NMLS certification is required in accordance with the SAFE Act.

Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, and strategically aligned into three major business segments; the Commercial Bank, the Retail Bank, and Wealth Management. Comerica's colleagues focus on relationships, and helping people and businesses be successful. In addition to Texas, Comerica Bank locations can be found in Arizona, California, Florida and Michigan, with select businesses operating in several other states, as well as in Canada and Mexico.

Comerica is proud to be an Equal Opportunity Employer - veterans/individuals with disabilities, committed to workplace diversity.