The Church and its investment management company will pay a combined $5m penalty to the US regulator.