Director of Governance, Risk and Compliance in London

Role: Head of Group Risk & Internal Control

Duration: Full Time – 40 hours per week (09:00 to 18:00)

Department: Risk, Regulation and Governance & Controls

Reports to: Executive Managing Director, Risk, Regulation and Governance & Controls

Location: London – Onsite (4 days per week in the office; WFH on Tuesdays, Wednesdays, or Thursdays)

ROLE PURPOSE

MNK Group is seeking a senior, technically strong Head of Group Risk & Internal Control to lead the design, implementation, and embedding of a robust Group-wide Internal Control Framework (ICF) across its international (re)insurance business. This is a critical second-line leadership role with full accountability for ensuring that risks are identified, assessed, controlled, monitored, and reported in a consistent, effective, and proportionate manner. The role holder will act as the Group’s subject matter expert on operational risk and internal controls, with a strong focus on practical implementation, first-line ownership, and capability uplift. The role combines strategic oversight with hands-on technical delivery, requiring deep experience in internal control frameworks, control design, roll-out programmes, training delivery, and regulatory engagement.

KEY ACCOUNTABILITIES

• Enterprise Risk Management Framework (ERMF)
• Own and continuously enhance the Group Enterprise Risk Management Framework, ensuring alignment with business strategy, regulatory expectations, and best practice.
• Lead the end-to-end Risk and Control Self-Assessment (RCSA) process, ensuring strong linkage between risks, controls, incidents, KRIs, and risk appetite.
• Provide effective second-line challenge to the first line, ensuring risks are appropriately identified, assessed, and mitigated.
• Oversee risk incident management, including root cause analysis, thematic reviews, and embedding lessons learned into control enhancements.
• Design and maintain the Group emerging risk framework, including horizon scanning, external research, and senior management reporting.
• Lead stress testing and scenario analysis to support strategic decision-making and risk appetite monitoring.
• Internal Control Framework (ICF)
• Design, implement, and maintain a comprehensive Group Internal Control Framework aligned to regulatory expectations and industry standards (e.g. COSO or equivalent).
• Define and maintain control standards, control taxonomies, documentation requirements, and minimum control expectations.
• Lead the roll-out and embedding of the ICF across all business units, functions, and jurisdictions.
• Ensure controls are clearly articulated, risk-aligned, appropriately designed, and operationally effective.
• Establish and oversee control design and operating effectiveness testing methodologies.
• Drive remediation of control deficiencies, ensuring timely closure and sustainable improvements.
• Act as the Group technical authority on internal controls, advising senior stakeholders on control design and operational risk matters.
• Governance, Risk & Compliance (GRC) Systems
• Own the configuration and ongoing enhancement of the Group GRC system.
• Ensure full integration of ERMF and ICF components within the GRC tool, including RCSAs, control testing, incidents, KRIs, and action tracking.
• Drive first-line and second-line adoption of the GRC system through training, guidance, and ongoing support.
• Ensure data quality, consistency, and integrity across all risk and control reporting.
• Training, Awareness & Culture
• Design and deliver structured training programmes on internal controls, RCSA methodology, and operational risk management.
• Develop detailed guidance materials, playbooks, control design standards, and training content.
• Lead workshops and deep-dive sessions to support ICF roll-out, regulatory change, and control uplift initiatives.
• Embed a strong risk and control culture by building capability and accountability across the Group.
• Governance, MI & Reporting
• Prepare high-quality MI and reporting for Boards, Committees, and Senior Management.
• Maintain the Group risk and control governance calendar and ensure effective tracking of actions.
• Support Board and Committee education on risk and internal control matters.
• Contribute to wider governance initiatives, including Operational Resilience and Business Continuity Planning.
• Regulatory & External Engagement
• Monitor regulatory developments across relevant jurisdictions (PRA, FCA, and overseas regulators).
• Assess and communicate regulatory impacts to senior stakeholders.
• Support regulatory interactions, reviews, and audits relating to risk management and internal controls.
• People & Leadership
• Act as a senior leader within the Risk, Regulation and Governance function.
• Mentor and develop junior risk team members.
• Build strong, trusted relationships with first-line and executive stakeholders.
• Promote collaboration and continuous improvement across the Group.

QUALIFICATIONS, SKILLS & EXPERIENCE

Essential:

• ~10+ years’ experience in risk management and internal controls within regulated financial services or (re)insurance.
• ~ Demonstrable hands-on experience designing, implementing, and embedding Internal Control Frameworks.
• ~ Strong technical knowledge of operational risk and control best practice.
• ~ Experience leading large-scale ICF roll-outs and training programmes.
• ~ Excellent stakeholder management and influencing skills.

Desirable:

• Professional qualifications such as ACII, IRM, or equivalent.
• Experience engaging with regulators on risk and control matters.
• Hands-on experience with GRC systems.

PERSONAL ATTRIBUTES

• Highly organised, proactive, and delivery focused.
• Technically credible and confident acting as a subject matter expert.
• Strong attention to detail with strategic perspective.
• Commercially aware and pragmatic.
• Resilient and adaptable in a fast-paced environment.