Job Description
To provide proactive leadership and operational support in implementing the Operational Risk Management strategy across Personal and Corporate business units and enabling functions.
The role ensures the consistent application of the Non-Financial Risk (NFR) framework, driving the identification, assessment, mitigation, and reporting of NFRs, including but not limited to fraud risk, information risk, third-party risk and business resilience risk, while embedding a strong risk culture and supporting governance.
This includes acting as a trusted advisor to business units, enabling effective risk oversight, supporting strategic change, and fostering continuous improvement. The role also contributes to stakeholder engagement, talent development, and the integration of risk into business decision-making, ensuring resilience and alignment with regulatory and organisational expectations.
Qualifications
Qualifications Required
* First Degree in Business Commerce or in Risk Management
* Post Graduate Degree Business Commerce or Risk Management (Preferred)
Work Experience Required
Risk Management Expertise (5–7 years):
* Strong knowledge of risk and control frameworks, assurance practices, and applications within the financial services industry.
* Fully conversant with concepts of risk appetite, risk response, and process improvement.
* Understanding of both Non-Financial Risk (NFR) and financial reporting.
Additional Information
Key Outputs
* Drive NFR Strategy and Framework - Implement and embed the Non-Financial Risk (NFR) framework and strategy across all business units and enabling functions, ensuring alignment with risk appetite, policies, and regulatory requirements.
* Act as a Trusted Risk Partner - Provide proactive risk management advice and tools to business units to mitigate financial, reputational, and regulatory impacts of NFR incidents, including fraud and information risk.
* Risk Identification, Assessment, and Reporting - Conduct risk assessments, scenario planning, and root cause analysis; complete RCSA processes; and ensure accurate reporting and escalation of material risks to governance forums.
* Information Risk and Third-Party Oversight - Guide and oversee information risk management, including data privacy, logical access, and third-party risk processes, ensuring compliance with internal frameworks and external standards.
* Stakeholder Engagement and Governance - Build and maintain strong relationships with internal and external stakeholders, including senior management, auditors, regulators, and industry peers, and actively participate in Risk and Management Committees
* Continuous Improvement and Risk Culture -Promote a strong risk and control culture through awareness initiatives, training, and mentoring, while driving process improvements and embedding risk thinking in business decisions.
* Support Strategic Change and Projects -Deliver risk input and oversight for strategic initiatives, new products, and major projects, ensuring changes to the business risk profile are quantified and managed within agreed appetite
Behavioural Competencies
* Articulating Information
* Challenging Ideas
* Convincing People
* Directing People
* Embracing Change Copes
Technical Competencies
* Analysing Risk
* Economic Capital Management
* Evaluating Risk Management Effectiveness
* Risk Measurement
* Risk Identification
* Risk Reporting
* Risk Response Strategy
* Risk/ Reward Thinking