Deliver and maintain an effective Enterprise Risk Management Framework that provides appropriate support for the business to make risk-based decisions
Enterprise Risk forms part of the wider Risk team within the Risk & Compliance function, which reports directly to the Chief Risk Officer (CRO). The Enterprise Risk team partners closely with senior managers and their teams across the business globally to:
Develop and embed a risk management culture within the company
Deliver and maintain an effective Enterprise Risk Management Framework that provides appropriate support for the business to make risk-based decisions
Equip the business to effectively and efficiently manage their risks through the implementation and embedding of a robust risk assessment methodology and the Governance, Risk and Compliance (GRC) system
Ensure appropriateness and transparency of risk information reported to the Board Risk Committee (BRC), the Executive Committee (ExCo) and other relevant governance committees
Overview of the Role
The post holder reports to and supports the Senior Manager, Enterprise Risk to educate, advise, challenge and support the embedding of good risk management practices and risk culture within the business and act as a dedicated risk partner and trusted advisor for the business area falling within the remit of the role.
The post holder is responsible for the delivery of the ERBP plan and activities allocated to them for the specific business units.
The role provides opportunities to actively engage with and support a broad range of stakeholders at all levels and as a result broaden relationships and partnerships across different functions within the business.
Duties and Responsibilities
Governance
Support the review of the design and effectiveness of the governance arrangements in place across the specific business units
Support, where required, the business to establish new and/or enhanced governance mechanisms to escalate, oversee and manage the risks threatening the business activities
Support other members of the ERBP team attending governance committees and forums by preparing inputs and analysis as required
Risk Exposure Monitoring
Support the design, implementation and embedding of key indicators and risk monitoring dashboards (e.g. business risk profile) to equip the business with tools and mechanisms enabling them to proactively assess and monitor and, where appropriate, effectively manage and mitigate their risk exposures vs. the business and/or firm’s risk appetite statements OR support the management and mitigation of their risk exposures vs. the business and/or firm’s risk appetite statements
Regularly monitor and, where applicable, escalate any concerns regarding increases in risk exposures and risk appetite breaches to the Senior Manager
Review and challenge key indicators values, trends and supporting business rationales; where applicable, escalate any concerns to the Senior Manager
Support the business in the implementation of appropriate monitoring and mitigating actions where risk exposures are increasing and/or where risk appetite statements have been breached
Policies Attestation Oversight & Procedures Oversight
Support the delivery of business-owned policies and procedures globally and across all business units falling within the remit of the role, taking into account, where applicable, local regulatory requirements confirmed by the Compliance teams
Support the business to deliver the policies attestations, where applicable, provide evidence based challenge to influence the attestation status and provide an independent assessment and rationale; escalate any concerns to the Senior Manager
Support the business to design and deliver appropriate mitigating actions where non-compliance with policies and procedures has been identified, where required and appropriate, support the business in the completion of waivers and exceptions
Support the business to implement mitigating actions so that waivers and exceptions can be removed in a timely manner
Risk & Control Self Assessments Coordination
Work closely with the control and risk owners within the business to deliver Risk and Control Self Assessments (RCSAs) that are robust and aligned to the RCSA methodology
Actively engage with the business to timely and appropriately document the RCSAs within the Governance, Risk and Compliance (GRC) system; where appropriate document risk challenge and approval in the GRC
Support the business in the delivery of adequate risk mitigating plans and, where applicable, support the articulation of risk acceptances
Issues Remediation Monitoring & Support
Support the business to document issues identified through the completion of Risk and Control Self-Assessments, incidents and lessons learnt, and any findings from the Assurance functions, external auditors and regulators
Support the business in the design of adequate remediation plans ensuring timely and appropriate risk mitigation outcomes based on the business residual risk target and the firm’s risk appetite statements
Support the business in the remediation of issues by providing constructive challenge, advice and help articulate additional resource requirements where applicable; proactively escalate any risks of issues becoming overdue to the Senior Manager
Review and challenge the evidence provided by the business to support the closure of open issues, where applicable i.e. excluding Internal Audit and Compliance identified issues
Ensure completeness and accuracy of issues and remediation actions documentation within the Governance, Risk and Compliance (GRC) system, providing quality assurance where necessary
Risk Events Remediation Oversight
Support the business when a risk event has been identified, and contribute to the appropriate resolution of the risk event thereafter by facilitating discussions with all impacted teams and stakeholders where applicable
Provide regular updates to appropriate stakeholders throughout the risk event resolution where required.
Review and, where applicable, help the business to enrich the risk event information documented in the Governance, Risk and Compliance (GRC) system
Complete, where required, the mandated risk review and approval fields within the GRC system; this includes ensuring that appropriate issues and remediation actions linked to the risk events are documented
Support the delivery of lessons learnt reviews where appropriate; agree on remediation actions, where applicable, to ensure that potential future risk events can be proactively avoided
Support the documentation of major risk event reports
Other Duties and Responsibilities
Support, where appropriate, the delivery of deep dives, control assurance and testing activities.
Support the Head of Business Continuity in the implementation of a comprehensive and effective business continuity management framework for the business units falling within the remit of the role.
Contribute to the effective use and development of the Governance, Risk and Compliance (GRC) system by gathering and providing feedback around the system functionalities to the Enterprise Risk Strategy (ERS) team; where applicable, collaborate on the design and roll-out of changes required to enhance the system
Contribute to the effective embedding of the Enterprise Risk Management Framework within the business and, where required, gather and provide feedback on any aspects of the framework to the ERS team to enhance the framework and ensure alignment with changes in business strategy and operating models
Support the delivery of projects by providing relevant analysis and inputs as requested by the Senior Manager
Support the ongoing risk training of the business and act as a risk champion within the business units falling within the remit of the role. Escalate any major risk training requirements to the ERS team so that they can be added to the firm-wide risk training plan
Support the delivery of any other activities and tasks as required by the Senior Manager
Team Management & Development
Support the Senior Manager to discharge their responsibilities and support other members of the ERBP team e.g. Managers and Associates
Timely escalate any delivery risks and issues to the Senior Manager
Maintain appropriate level of knowledge and competencies required to undertake the role and, where necessary, proactively engage with Senior Manager to discuss development opportunities
Technical Skills and Qualifications
Educated to degree level, relevant industry experience preferred
Professional qualification preferred but not essential e.g. IMC
Understanding of the financial services industry; asset management experience preferred
Good understanding of risk management methodologies and techniques preferred
Competencies Required
Good planning, analytical and problem solving skills
Ability to effectively network and confidently build and maintain relationships with clients, including key stakeholders
Good writing and verbal communication and ability to adapt delivery style to various audiences
Pro-active and self-sufficient with ability to escalate where appropriate
High standards of delivery and very good presentation skills
Ability to be resilient and stay motivated under pressure or facing tight deadlines
Ability to multi-task, prioritise and meet deadlines
Willingness to continuously learn and develop oneself to maintain industry and technical knowledge
Pragmatic, with a business oriented approach
Statements in this job description are intended to reflect, in general, the duties and accountabilities of the job, but are not to be interpreted as totally inclusive
We thank all candidates for their interest, however only those selected to move forward will be contacted.
In order to ensure you are given full consideration for this position, please ensure your candidate application is completely filled out and up to date. The information in the candidate application will be used in the selection process to assess candidacy for this position.