Global Head of 1st Line Risk

To be accountable on the delivery of 1st line operational and regulatory risk management across all areas of the business. Management of a team of 1st Line Risk managers and analysts to maintain consistent communication with senior leadership in discharging their risk management and control obligations in line with policy and regulation. Provide input to risk management strategies and objectives and ensure an integrated risk framework and strong control environment by leading the organization in the proactive identification of risk, continuous control improvement and issue mitigation. Partnering with the businesses to ensure adherence to the ORM minimum standards including: Risk Event Management (REV), Risk and Control Assessments (RCSA), Control Effectiveness Testing (ISAE/SOC1/2), Operational Soundness, Operational Resilience and KRI/Dashboard Population and Reporting.

Responsibilities

• Manage a global 1st Line Risk team to ensure risks, processes and control activities that cross functional responsibility are properly considered and activity allocated between teams to meet the 1st Line Risk mandated activities for CTI globally.
• Drive operational soundness on a cross functional basis, ensuring consistency of adoption of standards across CTI and supporting staff groups.
• Lead the development of risk management strategies that drive identification, quantification and mitigation of risk within the business, while providing a depth of knowledge and influence.
• Ensure inherent risks, controls and residual risks are identified and documented per the RCSA process.
• Ensure ISAE and SOC1 testing is performed and submitted to RCS / External Audit timelines.
• Lead the identification and review of the control inventories/maps/KRIs from a first line perspective.
• Lead the Operational Resilience program in the UK with collaboration with Enterprise Resilience and BCP partners, where required.
• Own select policies and procedures and recommend updates as required.
• Provide risk & controls thought leadership and expertise across functions and in conjunction with second line risk.
• Drive consistency in the application of the operational risk framework across the first line risk team to enhance risk identification and reporting.
• Provide knowledge and expertise to the management of complex risk incidents to ensure thorough communication, timely risk event action remediation and root cause identification. Own the resulting controls/mitigation.
• Evaluate internal risk trends and leverage industry knowledge to recommend actionable solutions.
• Provision of oversight to ensure that the first line testing of ISAE controls is conducted and effective remedial actions considered.
• Own the ISAE 3402 report, including setting the scope and managing the reporting accountant.
• Manage the integration of multiple ISAE reports.
• Have oversight of the Business control meeting outputs and ensure appropriate follow‑ups on most critical items.
• Contribute to appropriate risk forums on risk thematics.
• Benchmark industry‑wide data and stay up to date on trends, best practices, issues, and concerns.
• Maintain knowledge of Risk/Compliance guidance, Key Capabilities Deep Risk/Control knowledge and expertise: thorough understanding of current techniques in operational risk management, controls and operational soundness.
• Assess multiple data points to develop an actionable plan that is aligned with business objectives.
• Put in place mechanisms and oversee business unit deliverables with respect to the control environment.
• Design, establish, and oversee an integrated governance framework that supports Business Unit head understanding and actioning of key issues; ability to identify escalations as required.
• Influence other stakeholders to deliver on their operational risk responsibilities by providing strong thought leadership.

Qualifications

Experience in operational risk, controls, business management or audit.