Risk & Controls SME - ICFR / 1LOD

Excellent opportunity opens to assist the Head of Finance Governance, Risk & Controls with the following activities and responsibilities:

• Risk related activities are implemented & reported in accordance with the Risk and Control framework.
• UK Division compliance with Internal Controls over Financial Reporting (ICOFR) for UK reporting regimes.
• Data Governance standards (including those relating to GDPR) are met through effective end-to-end data controls with appropriate reporting to the relevant Boards and Committees.

Duties/Responsibilities

• Play a key role in the required quarterly ICOFR CEO/CFO certification ahead of the annual control testing program.
• Liaison with both Business and Support functions (Finance, Risk & Compliance, Operations, IT and Customer Service) teams to ensure that ICOFR documentation is kept up to date: Process Narrative Reports, Risk and Controls, EUC asset controls, SAP accounts scoping.
• Assist with the Data Governance framework activities and Data Register held in SharePoint, including:

• Working with the business teams in the maintenance of the individual Data Sets.
• Manage and facilitate the attestation of each Data Set by the Data Register Owners and Data Owners.
• Maintain the Issues and Remediation log – working with the business to resolve issues.
• Assist the Head of Finance Governance, Risk & Controls with the preparation of a Quarterly Data Quality Report for review and approval by the Financial Controller and Actuarial Function Holder.

• Review and maintenance of the functional Record of Processing Activity (RoPA) to ensure it is accurate, up to date and made easily retrievable for inspection and ongoing monitoring.
• Review and maintenance of the Record Retention and Disposal Guide (RR&DG) to ensure that it is accurate, up to date and made easily retrievable for inspection and ongoing monitoring.
• Management and deletion of data in accordance with the Record Retention and Disposal Guide.

• Review of the evidence to support the team’s implementation of policy requirements – where applicable.
• Review of the Data Governance Operating and Regulatory Reporting & Disclosure policy workbooks to ensure the implementation of these policies across the firm.
• Liaison with Risk team to ensure that the policy process requirements are kept up to date.

• Completion of a RCSA for each specific Finance Team function – arranging meetings, compiling and reporting on recognised risks.
• Risk Event Reporting within GRC/MetricStream – including monitoring remediation action plans through to completion.
• EUC Standard compliance across the Finance functions including: overseeing the use and management of EUC assets; ensuring that assessments are performed in accordance to the Standard and that the CLUK EUC Inventory is kept current.

Skills, Knowledge and Experience

• Commercial awareness and understanding of the needs of the business.
• Ideally a certified accountant or actuary.
• Willing and capable of making decisions independently to progress issues, and able to exercise sound judgement and commercial sense to understand the importance of different issues and assess when matters need to be escalated.
• Strong communication skills, demonstrating a clear and articulate standard of written and verbal communication in a complex environment, tailored for all levels of management.
• Strong ability to adapt messages to the audience in a format that is easily understood by colleagues.
• The ability to develop and maintain strong relationships across the finance function, acting with integrity and role modelling the company values at all times.
• Strong interpersonal/networking skills, with the ability to maintain a variety of relationships with multiple stakeholders.
• Ability to flex their style and delivery, in the moment, depending on the individual and/or audience.
• Sound problem solving skills and attention to detail with demonstrable ability in spotting issues, interdependencies and challenges to ensure work is produced to an accurate, commercial and informed standard.
• Self-motivated, well-organised, pragmatic and able to perform tasks independently.
• An interested and inquisitive individual who is committed to their own ongoing professional and personal development.

Qualifications

• Risk, Compliance, or willingness to progress towards any such qualifications would be an advantage although are not essential for this role.
• Knowledge of GDPR an advantage.