Head of Business Risk & Control

About Moneybox

At Moneybox, our mission is to give everyone the means to get more out of life. We're guided by our belief that wealth isn't about the money, it's about the means to more - more freedom, opportunities, possibilities, and peace of mind. Moneybox is an award-winning wealth management platform, helping over one and a half million people build wealth throughout their lives, whether they’re saving and investing, buying their first home, or planning for retirement.

Job Brief

The Head of Business Risk & Control leads MBSCL’s consolidated first-line risk and control function: the business-side ownership of advice controls, operational controls, and the oversight of DML-delivered services and third-party vendors. Two Managers report in (Advice Risk & Control and Operations Risk & Control) and the role is the senior first-line counterpart to the Senior Compliance Manager - Advice, whose independent second-line function tests and challenges everything this role produces. The role reports to the Managing Director for how well the service is running - operational performance, customer outcomes, control effectiveness - and to the Executive Director for the arrangements themselves - the Intra Company Agreement (ICA), third-party contracts, resilience and the open SYSC 8 items. Where an issue is about how the service is performing, it escalates to the MD; where it is about the arrangement itself, it escalates to the Executive Director. Where an issue implicates advice suitability, the Director of Advice retains suitability accountability and consumes your MI and findings on that dimension.

What you'll be doing

• Leading the function
• Function design - own the design and operation of MBSCL’s first-line risk and control framework across both domains, ensuring it is proportionate, testable and evidenced.
• Line management - manage and develop the Advice Risk & Control Manager and Operations Risk & Control Manager; set the standards for what good first-line control and oversight look like across the two domains and hold both to them.
• Integrated MI - bring the advice and operations risk pictures together into a single view of business risk and control health for the Managing Director, the Executive Director, the Advice Oversight Committee and the Board.
• Advice controls
• Control ownership - own the first-line control environment for the advice service delivered by the Advice Risk & Control Manager: the file-review and QA programme (100% at launch, transitioning to risk-based sampling), input/output validation, engine score monitoring, stress testing, and the operational running of the T&C scheme owned by the Director of Advice.
• Engine assurance - own the evidence that the rules-based Advice Engine is producing suitable output within the House Rules.
• Interface with the Director of Advice - supply the suitability MI and QA findings the Director of Advice needs to discharge their suitability accountability; consult on House Rules changes; support T&C evidence.
• Operational & outsourcing oversight
• Intra-group agreement oversight - own the day-to-day oversight of the ICA with DML - service definitions, service levels, performance MI, remediation and escalation - so that MBSCL can demonstrate effective, continuing oversight of its outsourced critical functions.
• Outsourcing oversight - maintain the outsourcing oversight records that support the Executive Director’s accountability and MBSCL’s obligations, working through any open items with Legal and Compliance.
• Third-party vendors - own the first-line relationship with material third-party providers with contract and service-level management, performance and capacity monitoring against agreed thresholds, service reviews, due-diligence refresh, escalation.
• Operations oversight - oversee, via the Operations Risk & Control Manager, DML’s delivery of customer support, AML/KYC processing and complaints handling which ladder into service level, quality, and the Consumer Duty support outcome.
• Resilience and continuity - coordinate with DML on operational resilience and business continuity arrangements for the services MBSCL depends on, including participation in continuity testing.

What we're looking for

• Essential
• Substantial risk and control leadership experience in a regulated retail investment, advice or platform business with hands-on ownership of first-line controls.
• Strong working knowledge of COBS 9A suitability requirements, Consumer Duty (PRIN 2A) and the three-lines-of-defence model in practice.
• People leadership experience - managing senior specialist managers and building a small team; setting standards and holding both domains to them.
• The judgement and standing to operate a dual accountability cleanly, escalate uncomfortable findings, and challenge senior stakeholders constructively.
• Track record of producing risk MI that genuinely informs decisions with concise, decision-ready reporting for senior management and committees.
• Desirable
• Direct experience of advice-side control including file review, suitability monitoring, QA programme design or T&C and of outsourcing or supplier oversight in a regulated context, including familiarity with SYSC 8 expectations.
• Experience of automated, digital or hybrid advice models, and of controls over rules-based or algorithmic decisioning.
• Experience of intra-group service arrangements and the discipline of overseeing a group entity as rigorously as a third party.
• Level 4 Diploma in Regulated Financial Planning or an equivalent qualification.
• Experience supporting an FCA authorisation, a new regulated service launch, or pre-launch assurance work.
• Experience of TPRM frameworks and third-party lifecycle management (onboarding, in-life oversight, exit).

Whats in it for you

• Opportunity to join a fast-growing, award-winning and super ambitious company.
• Work with a friendly team of highly motivated individuals.
• Be in an environment where you are listened to and can actually have an impact.
• Thriving collaborative and inclusive company culture.
• Company pension scheme.
• Company bonus scheme.
• Hybrid working environment.
• Home office furniture allowance.
• Personal Annual Learning and Development budget.
• Private Medical Insurance.
• Health Cash Plan – cashback on everyday healthcare like dental and opticians.
• Cycle to work scheme – spread the cost of a new bike and accessories.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.