Morgan McKinley are delighted to be working on behalf of an established organization who is seeking an experienced Senior Manager - Enterprise Risk & Assurance to lead its enterprise risk management, internal controls and assurance activities.
Operating as a second-line function, the role provides independent oversight, constructive challenge and strategic insight to executive leadership and governance committees. You will maintain and enhance the organization's risk and control frameworks, ensuring risks are appropriately managed and controls operate effectively.
The successful candidate will combine technical expertise, commercial awareness and strong stakeholder management skills to strengthen governance, support informed decision-making and improve organizational resilience.
Key Responsibilities
Enterprise Risk Management
- Lead and continuously improve the Enterprise Risk Management Framework and corporate risk registers.
- Facilitate risk assessments and challenge risk ratings, mitigation plans and residual exposures.
- Support the development of risk appetite and identify emerging and strategic risks.
- Promote clear risk ownership and consistent risk management practices.
Internal Controls & Assurance
- Maintain the Internal Controls Framework and Controls Register.
- Develop and deliver a risk-based assurance and control testing programme.
- Assess the design and effectiveness of key financial, operational and compliance controls.
- Monitor control deficiencies, challenge remediation plans and validate corrective actions.
- Coordinate assurance activities and identify gaps in control coverage.
Governance & Executive Engagement
- Advise executive leadership on risk, governance and control matters.
- Present risk insights, assurance findings and emerging issues to senior management and relevant governance committees.
- Provide independent challenge to business leaders and escalate material risks and control weaknesses.
- Support strategic initiatives and organizational change through risk and governance advice.
Operational Risk & Reporting
- Oversee incident, fraud and credit risk reporting within the enterprise risk framework.
- Support root cause analysis, corrective actions, business continuity and operational resilience.
- Develop Key Risk Indicators (KRIs) and deliver clear, insightful risk and assurance reporting.
- Promote risk awareness, accountability and continuous improvement across the organization.
About You
Experience
- 8 years+ experience in enterprise risk, assurance, internal audit, governance or internal controls.
- Proven ability to develop risk frameworks, assess control effectiveness and deliver assurance programmes.
- Experience engaging with executive leadership and senior governance committees.
- Strong knowledge of risk management, internal controls and assurance methodologies; ISO 31000 and/or COSO knowledge desirable.
- Understanding of operational, financial, compliance, fraud and credit risk.
- Excellent analytical, communication and report-writing skills, with the confidence to challenge constructively and influence senior stakeholders.
- High integrity, sound judgement, commercial awareness and a pragmatic, solutions-focused approach.
