moneyboxapp - Head of Business Risk & Control
Requirements
• Substantial risk and control leadership experience in a regulated retail investment, advice or platform business with hands-on ownership of first-line controls. • Strong working knowledge of COBS 9A suitability requirements, Consumer Duty (PRIN 2A) and the three-lines-of-defence model in practice. • People leadership experience - managing senior specialist managers and building a small team; setting standards and holding both domains to them. • The judgement and standing to operate a dual accountability cleanly, escalate uncomfortable findings, and challenge senior stakeholders constructively. • Track record of producing risk MI that genuinely informs decisions with concise, decision-ready reporting for senior management and committees. • Direct experience of advice-side control including file review, suitability monitoring, QA programme design or T&C and of outsourcing or supplier oversight in a regulated context, including familiarity with SYSC 8 expectations. • Experience of automated, digital or hybrid advice models, and of controls over rules-based or algorithmic decisioning. • Experience of intra-group service arrangements and the discipline of overseeing a group entity as rigorously as a third party. • Level 4 Diploma in Regulated Financial Planning or an equivalent qualification. • Experience supporting an FCA authorisation, a new regulated service launch, or pre-launch assurance work. • Experience of TPRM frameworks and third-party lifecycle management (onboarding, in-life oversight, exit). • ## Whats in it for you • Opportunity to join a fast-growing, award-winning and super ambitious company • Work with a friendly team of highly motivated individuals • Be in an environment where you are listened to and can actually have an impact • Thriving collaborative and inclusive company culture • Company pension scheme • Company bonus scheme • Hybrid working environment • Home office furniture allowance • Personal Annual Learning and Development budget • Private Medical Insurance • Health Cash Plan – cashback on everyday healthcare like dental and opticians • Cycle to work scheme – spread the cost of a new bike and accessories
Responsibilities
• Leading the function • Function design - own the design and operation of MBSCL’s first-line risk and control framework across both domains, ensuring it is proportionate, testable and evidenced. • Line management - manage and develop the Advice Risk & Control Manager and Operations Risk & Control Manager; set the standards for what good first-line control and oversight look like across the two domains and hold both to them. • Integrated MI - bring the advice and operations risk pictures together into a single view of business risk and control health for the Managing Director, the Executive Director, the Advice Oversight Committee and the Board. • Advice controls • Control ownership - own the first-line control environment for the advice service delivered by the Advice Risk & Control Manager: the file-review and QA programme (100% at launch, transitioning to risk-based sampling), input/output validation, engine score monitoring, stress testing, and the operational running of the T&C scheme owned by the Director of Advice. • Engine assurance - own the evidence that the rules-based Advice Engine is producing suitable output within the House Rules • Interface with the Director of Advice - supply the suitability MI and QA findings the Director of Advice needs to discharge their suitability accountability; consult on House Rules changes; support T&C evidence. • Operational & outsourcing oversight • Intra-group agreement oversight - own the day-to-day oversight of the ICA with DML - service definitions, service levels, performance MI, remediation and escalation - so that MBSCL can demonstrate effective, continuing oversight of its outsourced critical functions. • Outsourcing oversight - maintain the outsourcing oversight records that support the Executive Director’s accountability and MBSCL’s obligations, working through any open items with Legal and Compliance. • Third-party vendors - own the first-line relationship with material third-party providers with contract and service-level management, performance and capacity monitoring against agreed thresholds, service reviews, due-diligence refresh, escalation. The Director of Advice sets the requirements for advice generation and suitability; DML owns technical integration; you own the arrangement. • Operations oversight - oversee, via the Operations Risk & Control Manager, DML’s delivery of customer support, AML/KYC processing and complaints handling which ladder into service level, quality, and the Consumer Duty support outcome. • Resilience and continuity - coordinate with DML on operational resilience and business continuity arrangements for the services MBSCL depends on, including participation in continuity testing.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT