Head of Risk Assurance and Controls - 12 Month Fixed Term Contract

We’re looking for a Head of Risk Assurance & Controls on a 12 month fixed term contract to shape how assurance works at CFC. This is a high‑impact second line role, bringing together audit, controls and external assurance to create a clear, joined‑up view of risk and control effectiveness across the business. This role provides an independent view of control effectiveness, risk management and governance, ensuring assurance activity is well coordinated and delivered to the right stakeholders in a clear and impactful way. Working closely across the business, you’ll strengthen the control environment and support sustainable improvement. The focus is not on delivering assurance directly, but on setting direction, connecting insight across the organisation and driving follow‑through to ensure actions land and deliver real change.

About the role

• Internal Audit Oversight
  • Own the relationship with the outsourced Internal Audit provider, ensuring delivery of a risk‑aligned audit plan.
  • Review and challenge outputs to ensure reporting is clear, consistent and decision‑useful.
  • Maintain oversight of actions, including ownership, progress and remediation timelines.
  • Identify themes and systemic issues, feeding these into the broader assurance and risk view.
• Controls Environment
  • Provide second line oversight of the controls framework and how it operates in practice.
  • Challenge and support the business on control design, implementation and ongoing effectiveness.
  • Oversee how controls are embedded within systems and processes, including how effectiveness is monitored.
  • Review and challenge risk and control assessments (including RCSAs) where appropriate.
  • Drive consistency, quality and continuous improvement across the control environment.
• External Audit & Assurance (including Syndicate partners)
  • Coordinate and oversee all external assurance activity across the business.
  • Act as the key relationship owner for external auditors and Syndicate partners.
  • Ensure reviews, thematic assessments and deep dives are aligned, coordinated and focused on key risks.
  • Assess and challenge outputs, ensuring findings are clearly understood and translated into practical improvements.
  • Maintain a clear view across the three lines of defence, avoiding duplication and identifying gaps.
• Reporting & Insight
  • Translate audit and assurance activity into clear, meaningful insight for senior stakeholders.
  • Maintain a consolidated view of risks, findings and actions, with strong oversight of tracking and data quality.
  • Use trend analysis and thematic insights to support prioritisation, decision‑making and continuous improvement.
• Systems & Assurance Coordination
  • Oversee governance and reporting of assurance activity, including outputs to senior management, Risk Committee and Board.
  • Manage and maintain the EUC inventory.
  • Ensure effective tracking of audit and assurance actions, with accurate and timely data.
  • Drive effective use of risk and control systems (e.g. Decision Focus) to support monitoring, reporting and action tracking.
  • Support the development of a coordinated, risk‑based assurance plan across the three lines of defence to improve coverage and efficiency.

About you

We’re looking for someone with a strong track record in Risk, Audit or Assurance, ideally within a second line or oversight role, and a good working understanding of how risk and controls operate in practice. Experience engaging with Internal Audit or broader assurance activity would be beneficial. Experience in insurance or financial services would be valuable, particularly within complex or regulated environments. Exposure to the Lloyd’s or MGA market is helpful, but not essential. You’ll be comfortable operating at pace, bringing clarity to complex issues and maintaining momentum across multiple priorities. Experience in change or programme‑led environments is advantageous, particularly where risk, controls or assurance activity is evolving. Strong organisational and delivery focus is key. You’ll be someone who can think ahead, keep actions moving and drive progress through others across the business. Just as important is your ability to build trusted relationships, communicate clearly and influence effectively without relying on formal authority. A pragmatic, commercial mindset is essential, able who can strike the right balance between challenge and partnership, and help position Risk as a function that adds real value.