
Enterprise Risk Management Senior Manager
- London
- Permanent
- Full-time
- ERM Framework: Supporting the Head of ERM in the development and embedding of the ERM framework to align with the organisation’s strategies and priorities, ensuring risk awareness and understanding at all levels.
- Risk Universe: Continuous update and refining of the risk universe, maintaining comprehensive and appropriate risk topographies and classifications in accordance with recognised frameworks, ie COSO.
- Risk Assessment and Response: Collaborate with risk owners across the Organisation to assess risks, working together to determine the most appropriate risk responses ensuring that each response aligns with the Organisation’s overall strategy and risk appetite / tolerance.
- Risk Appetite and Tolerance: Regularly review and adjust the Organisation’s risk appetite and tolerance levels to ensure they are appropriate and adhered to, reflecting the Organisation’s strategic aims and regulatory landscape.
- Key Risk Indicators: Support the development of key risk indicators to effectively monitor and communicate potential risks, enabling proactive management and strategic decision-making.
- Risk Management System: Working alongside internal developers, suggesting enhancements to the platform used to facilitate the ERM processes and provide the data for risk reporting.
- Sustainability and CSR: Integrating sustainability risks into the ERM framework, aligning with CSR goals and addressing ESG factors.
- Third Party Risk: Oversee a third-party risk management programme to identify, assess, and mitigate risks associated with external partners, including vendors, service providers, and strategic partners.
- Risk Culture: Assess and actively report on the Organisation’s risk culture, driving initiatives to embed a proactive risk management culture across the organisation.
- Internal Controls Framework: Support in the development and maintenance of a comprehensive internal control framework that identifies and interlinks all control activities across the Organisation.
- Determine the Organisation’s Key Controls: Identify and establish key controls crucial for ensuring the Organisation’s operational integrity and compliance, safeguarding against potential risks.
- Controls Testing: Design and execute regular testing of internal controls to evaluate both their design and operational effectiveness, identifying areas for enhancement.
- Controls Self-Assessment: Implement and manage a robust internal controls self-assessment programme that enables regular evaluation of internal controls across the Organisation. This ensures their effectiveness and compliance with relevant standards and regulations.
- Reporting and Dashboards: Support in the development and maintenance of a detailed reporting and dashboard tools that integrate data from the internal controls framework, key controls status, controls testing, self-assessments, and certification processes along with key risk indicators, risk score trends, and risk status relative to the Organisation’s appetite and tolerances. These tools will provide Management and the Partnership Council with ongoing, clear visualisations and reports to monitor the Organisation’s risk and control environments effectively.
- Stakeholder Engagement and Management: Build and maintain strong relationships with internal stakeholders to ensure widespread support for ERM and internal controls initiatives. Effectively co-ordinate and integrate activities across both the first and second lines of defence, ensuring alignment of management’s risk and control activities.
- Performance Metrics: Establish and monitor performance metrics for the function to evaluate its efficiency and effectiveness.
- Technology and Innovation: Promote the use of advanced technology and innovative practices to enhance the effectiveness and efficiency of the Organisation’s ERM and Internal Controls frameworks.
- Training and Development: Develop and lead training programs to enhance risks and controls awareness and compliance understanding at all levels.
- Regulatory Environment: Stay updated on new regulations and industry standards through regular attendance at seminars, workshops, and conferences.
- Intranet Site: Manage and update the Risk Management and Internal Controls intranet site dedicated to risk management and internal controls, providing accessible and current information to all employees.
- Proven experience of the above in a regulated environment.
- Overseeing an ERM and / or internal controls framework.
- A relevant qualification (ACA, ACCA, CIA, IRM).
- Demonstrated ability to work effectively with senior leaders and oversight board members.