Operational / Enterprise risk - Fixed term contract 12 months

We’re looking for an Enterprise & Operational Risk Transformation Lead to play a pivotal role in strengthening how we identify, manage and respond to risk across the business.

This is a senior, highly influential role for a risk professional who enjoys building frameworks, embedding technology and partnering with leaders to make risk practical, meaningful and commercially relevant.

The role:

As a key member of the Risk team, you’ll lead the evolution of the Enterprise and Operational Risk Management Framework, ensuring it remains robust, proportionate and fit for the future.

Your role will include:

1. Leading the design, implementation and embedding of our GRC software platform, ensuring it supports both current and emerging business needs
2. Partnering with Legal, Risk & Compliance leadership to deliver a best‑in‑class enterprise and operational risk framework
3. Enhancing risk policies, procedures, risk appetite statements and key risk indicators
4. Owning and maintaining the central risk and control library, including risk and control taxonomies
5. Strengthening core operational risk tools such as RCSA, incident and issue management processes
6. Providing effective second‑line challenge, insight and analysis to senior leaders and governance forums
7. Working closely with first‑line teams (Operations, Technology, Data & Security, People and Legal) to embed good risk practices into systems, products and change initiatives
8. Supporting the Chief Risk Officer in the design and implementation of AI governance and risk framework
9. Promoting a strong, positive risk culture, making risk relevant and accessible across the organisation

We’re looking for someone who has:

1. Strong experience designing and embedding enterprise and operational risk frameworks
2. A solid understanding of UK regulatory requirements within financial services
3. Hands‑on experience with GRC systems and risk data
4. Expertise in RCSA, incident management, control testing and risk reporting
5. The ability to translate complex risk issues into clear, commercial insight
6. Excellent stakeholder management and influencing skills
7. A pragmatic mindset — balancing risk management with business outcomes
8. An interest in, or experience of, AI governance and technology‑related risks