Head of Risk & Compliance

The Head of Risk & Compliance will be tasked with;

• Leading the Group risk management strategy and framework to enable the business to manage risk smartly and effectively bearing in mind the risk profile of the group and the sector it operates in.
• With the support of the executive and senior management team, embed an effective risk management framework and culture that is proportionate, effective and supported by the business.
• Lead on all risk reporting and presentation to the board and exco.
• Facilitation of the management of risks within an agreed risk appetite, taking mitigating actions where risks are deemed out of tolerance.
• Lead information security governance and compliance (including ISO27001 compliance), data protection, business continuity, insurance, compliance checks of suppliers and health and safety.
• Provide an effective second line monitoring and assurance function.
• Oversee individual incident reporting, including leading on any breach investigations, root cause analysis investigations and liaison with regulators (where necessary).
• Oversee Health and Safety compliance and provide direction on an effective, risk-based Health and Safety strategy.
• Develop, lead and motivate the Risk & Compliance team to maximise effectiveness and efficiency, including management of internal experts focused on specific areas of group compliance and developing colleagues to maximise their potential.
• Manage the use of external experts and any appropriate tools (such as AI), where appropriate, to measure and manage risks such as cyber security and technology debt.
• Manage the secretariat of the Risk and Assurance Committee and Compliance Committee.