Partnering closely with the business the Risk & Controls Manager will support on a key project to move from the control mapping into embedded risk and control management. You will ensure risks, controls and remediation activities are implemented effectively, owned by the business and sustained as part of business as usual operations.
- Lead the development and rollout of Risk and Control Self-Assessments (RCSAs) across all in-scope business functions, translating Risk and Control Matrices into practical, business-owned assessments.
- Support risk owners to assess inherent and residual risk, evaluate control effectiveness and define proportionate risk treatment plans.
- Track and coordinate remediation arising from control gaps and RCSA outcomes, challenging action owners, maintaining momentum and escalating overdue or high-risk actions through the appropriate governance forums.
- Act as the primary point of contact for business stakeholders throughout implementation, providing hands-on support and coaching the First Line on risks, controls, responsibilities and accountabilities.
- Support the definition of key control testing methodologies, working with control owners to document evidence requirements and testing approaches that are practical, proportionate and effective within BAU processes.
- Drive engagement and confidence in the programme through clear communication, guidance and regular stakeholder support.
- Support the transition from project delivery into BAU ownership by establishing consistent approaches to control monitoring, reporting and governance.
- Maintain accurate and current records of risks, controls and actions within Decision Focus.
- Prepare progress updates, implementation metrics and status reporting, providing visibility of emerging risks, control weaknesses and implementation challenges.
- Support governance forums through clear management information, action tracking and escalation
- Strong experience in operational risk, controls, assurance or a comparable risk management role within a complex organisation.
- Practical experience of designing, implementing or embedding RCSAs and translating risk and control frameworks into business-owned processes.
- Proven ability to manage remediation plans, challenge action owners and drive delivery against agreed timelines.
- Strong business-partnering skills, with the confidence to advise, coach and constructively challenge stakeholders at different levels.
- Clear written and verbal communication skills, including the ability to produce concise management information and governance reporting.
- Sound understanding of risk and control principles, including inherent and residual risk, control design, operating effectiveness and risk treatment.
- Ability to apply proportionate governance and assurance practices in a regulated environment.
- Experience defining control evidence requirements and practical control testing approaches.
- Strong analytical and organisational skills, with the ability to manage multiple actions, dependencies and stakeholders.
- Experience using a governance, risk and compliance platform; familiarity with Decision Focus would be advantageous.
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
