Senior Manager of Controls Framework & RCSA (1st Line of Defense Risk)

• FTSE Russell is seeking an experienced, credible and delivery-focused Senior Manager, Controls Framework & RCSA to lead the design, governance, operation and continuous improvement of the first-line Controls Framework and Risk & Control Self-Assessment programme across the global business!
• This role sits within the FTSE Russell Regulatory, Risk & Controls function and acts as the first-line subject matter expert for controls management, control lifecycle governance, controls rationalisation and RCSA methodology
• The role is accountable for establishing a credible, complete and sustainable Controls Framework that enables effective risk identification, control design, control assessment, assurance, root cause analysis, risk appetite monitoring and senior management reporting
• The Senior Manager will lead the ongoing uplift of the controls environment across FTSE Russell, including control inventory rationalisation, control taxonomy and classification, process-risk-control mapping, control documentation standards, ownership and accountability models, evidence requirements, governance routines and operating model implementation
• The role will ensure that controls are not simply documented, but are clearly linked to business processes, process risks, operational risks, regulatory obligations, incidents, issues, audit findings and RCSA outcomes
• Working closely with business leaders, Product, Operations, Engineering, Corporate Functions, Second Line Risk, Compliance, Internal Audit, Technology and control owners, the role will provide senior-level guidance, challenge and direction to improve control quality, strengthen risk management practices and embed a more consistent, evidence-led and regulator-credible control environment

• Controls Framework Ownership

• Own and continuously enhance the FTSE Russell first-line Controls Framework, ensuring it remains credible, complete, sustainable and aligned to LSEG standards and regulatory expectations
• Establish, maintain and embed control policies, standards, methodologies, templates, guidance and governance requirements across FTSE Russell
• Define and maintain control taxonomy, control classification criteria, control inventory standards and minimum documentation requirements
• Set expectations for control objectives, design quality, ownership, frequency, evidence, testing readiness and lifecycle management
• Ensure consistency in control design, documentation, ownership and evidence standards across business areas, regions and functions
• Act as the primary first-line SME for controls governance, controls lifecycle management, control quality and framework interpretation
• Provide senior-level guidance and challenge to business collaborators on control design, adequacy, sustainability and alignment to key risks
• Ensure the Controls Framework supports wider risk management processes, including RCSA, issue management, incident management, RCA, assurance and risk appetite monitoring

• Controls Uplift and Transformation

• Lead the controls uplift programme across FTSE Russell, ensuring clear scope, governance, milestones, delivery discipline and measurable outcomes
• Define and implement methodologies for control classification, rationalisation, standardisation and redesign
• Oversee the identification and removal of duplicate, obsolete, poorly defined or non-control activities from the controls inventory
• Drive the redesign and standardisation of retained controls, ensuring they are clear, measurable, testable and appropriately aligned to risk
• Establish minimum standards for control objectives, ownership, frequency, evidence, performance expectations and testing requirements
• Ensure the control inventory remains accurate, complete, current and capable of supporting assurance, reporting and regulatory scrutiny
• Oversee control remediation and uplift activity, including delivery tracking, dependency management, issue escalation and closure evidence
• Support the transition from fragmented control documentation to a more mature, consistent and sustainable control lifecycle model
• Ensure uplift activity is embedded into BAU governance rather than treated as a one-off clean-up exercise

• Process, Risk and RCSA Integration

• Lead integration of controls with the RCSA framework, ensuring assessments are grounded in a clear understanding of process risks and control coverage
• Ensure key controls are mapped to business processes, process risks, operational risks and relevant risk taxonomy categories
• Oversee alignment between controls, incidents, issues, audit findings, RCA outcomes, assurance results and RCSA conclusions
• Ensure root cause analysis and incident/issue themes are used to inform control improvements, assessment activity and remediation priorities
• Drive a consistent methodology for risk and control assessment globally, including clear standards for inherent risk, control effectiveness, residual risk and action planning
• Ensure RCSA outputs are evidence-based, comparable across business areas and capable of supporting senior management and Board-level reporting
• Support the translation of RCSA outcomes into remediation actions, issue creation, control uplift or targeted assurance activity where required
• Promote better linkage between risk appetite, key risk indicators, control performance and assessment outcomes

• Governance and Operating Model

• Establish and embed the future-state Controls Framework and RCSA operating model across FTSE Russell
• Define clear RACI structures across control owners, process owners, risk coordinators, first-line risk teams, Control Utility, Second Line Risk and assurance functions
• Implement control governance forums, design authorities, working groups and decision-making processes to support control lifecycle discipline
• Develop periodic controls review, control attestation and inventory certification processes
• Ensure robust lifecycle management for all controls, including creation, review, amendment, retirement and escalation
• Define governance standards for control changes, rationalisation decisions, control exceptions, evidence gaps and remediation activity
• Ensure controls governance outputs are documented, decisioned and audit-ready

• Reporting and Management Information

• Develop and maintain controls and RCSA management information that provides meaningful insight into control population quality, control effectiveness, control coverage and framework maturity
• Track controls uplift progress, rationalisation outcomes, inventory health, overdue reviews, remediation activities and key framework milestones
• Deliver clear, action-oriented reporting to Executive Committees, Risk Committees, governance forums and senior collaborators
• Support risk appetite, assurance, operational resilience, regulatory and audit reporting requirements through accurate and defensible controls data
• Provide insight into emerging themes, control weaknesses, systemic drivers, repeat issues and areas of heightened risk
• Ensure MI moves beyond activity reporting to highlight what is changing, what remains at risk and where senior management action is required
• Establish consistent reporting definitions, data quality standards and reconciliation routines across control and RCSA reporting
• Use reporting to drive accountability, prioritisation and improvement across business-owned controls

• Stakeholder Management and Advisory

• Build strong partnerships with senior collaborators across Product, Operations, Engineering, Corporate Functions, Technology, Second Line Risk, Compliance and Internal Audit
• Act as a trusted advisor to business leaders and control owners on controls framework requirements, control design, risk assessment and governance expectations
• Facilitate senior workshops, challenge sessions and decision forums to support control uplift, RCSA execution and operating model implementation
• Influence collaborators to adopt consistent control standards, address gaps and embed stronger control ownership
• Support regulatory reviews, Internal Audit activity, second-line challenge and assurance engagements by ensuring control information is clear, complete and defensible
• Translate technical control and risk concepts into clear, practical guidance for business collaborators
• Escalate material control weaknesses, delivery risks, ownership gaps or unresolved remediation matters in a timely and structured way
• Represent the first-line controls framework in senior governance discussions where required

• Continuous Improvement and Risk Culture

• Identify opportunities to improve the effectiveness, efficiency and sustainability of the Controls Framework and RCSA programme
• Drive automation, workflow optimisation and data quality improvements within Metric Stream and supporting tooling
• Monitor relevant industry practice, regulatory expectations and internal lessons learned to inform framework evolution
• Promote a strong controls culture across FTSE Russell by reinforcing clear ownership, transparency, evidence-based assessment and disciplined remediation
• Drive maturity of the controls environment from inventory maintenance toward risk-aligned, assurance-ready and insight-led controls management
• Support capability building across control owners and risk coordinators through guidance, training, templates and practical support
• Embed continuous feedback loops between controls, incidents, issues, RCA, audit findings, RCSA and risk appetite reporting
• Ensure improvements are sustainable, repeatable and embedded into BAU governance rather than dependent on individual effort

The role requires strong technical knowledge of control frameworks and RCSA methodologies, combined with practical delivery experience, collaborator influence, governance discipline and the ability to drive change across a complex, global and regulated business It is well suited to someone who can operate as both a framework owner and transformation lead: setting standards, mobilising collaborators, overseeing delivery and ensuring outcomes are embedded sustainably Experience developing controls MI, governance reporting, maturity reporting or committee materials for senior audiences Strong collaborator management and influencing skills, including the ability to engage seniorcollaboratorss and challenge constructively Experience operating within a highly regulated financial services, market infrastructure or similar complex environment Proven experience leading controls transformation, controls uplift, remediation or framework redesign programmes Significant experience in operational risk, controls management, risk governance, internal controls, assurance, audit or a comparable regulated environment Strong analytical capability, with the ability to interpret complex information, identify themes and translate findings into practical action Experience performing or leading controls rationalisation, standardisation, inventory remediation or control quality improvement activity Strong understanding of the relationship between processes, risks, controls, issues, incidents, audit findings and risk assessments Extensive knowledge of controls frameworks, control lifecycle management and RCSA methodologies Ability to design standards and methodologies while also driving practical implementation and delivery Strong delivery discipline, with the ability to manage multiple priorities, dependencies and collaborator expectations Excellent written and verbal communication skills, including the ability to produce clear, defensible and executive-ready materials Experience with Metric Stream or equivalent GRC platforms Experience supporting regulatory remediation programmes, Internal Audit reviews, second-line assurance activity or Section 166 reviews Knowledge of benchmark administration, market infrastructure, financial market operations, index, data or analytics businesses Experience implementing RCSA methodology improvements, control attestation processes or risk appetite reporting enhancements Professional qualifications in risk management, audit, governance, compliance or a related discipline Experience working across global teams and influencing stakeholders across multiple regions

#J-18808-Ljbffr