Director - Operational Risk

b Overview /b p As Director of Operational Risk, you will lead the UK entity’s risk program within 2LOD, shaping the operational risk framework to meet FCA, DORA, and other regulatory expectations. You will own regulatory engagements, risk assessments, and incident management, ensuring timely escalation and durable controls. You’ll work with global risk colleagues to align local risks with firm-wide risk governance and strategic risk appetite. This role offers impact across regulatory compliance, resilience, and risk governance in a multinational setting. /p b Responsibilities /b ul li Regulatory oversight and engagement with regulators (FCA, NFA) and supervision, including response management and control embedding /li li Own compliance with DORA ICT risk management, resilience testing, third-party risk oversight, and incident reporting /li li Maintain knowledge of FCA Handbook, SM CR, SYSC, MIFIDPRU/ICARA, and translate regulations into practical controls /li li Manage day-to-day operational risk activities (RCSA, control monitoring, KRIs, risk appetite) /li li Oversee incident management lifecycle, escalation, root-cause analysis, and post-incident reviews /li li Provide 2LOD challenge to 1LOD risk activities and coordinate with front office, operations, and support /li li Lead incident reporting and escalation to regulatory authorities within required timeframes /li li Oversee TPRM and outsourcing risk, ensure alignment with DORA and FCA requirements /li li Escalate material incidents or local concerns to Global Head of Enterprise Risk and SFL Head of Risk /li li Represent operational risk in governance forums and risk committees, collaborating with 1LOD, Compliance, Legal, Internal Audit, and global risk teams /li /ul b Key requirements /b ul li Extensive operational risk management experience in a regulated financial services firm at Director level /li li Direct regulatory engagement experience with the FCA; familiarity with NFA and other EMEA regulators /li li Working knowledge of DORA and its ICT risk management, resilience testing, and incident reporting requirements /li li Strong experience in RCSA, incident management, risk reporting, and operational resilience /li li Understanding of third-party / outsourcing risk and related regulatory expectations /li li Ability to work autonomously with minimal supervision and escalate when needed /li li Excellent written and verbal communication skills for regulator-ready and Board-ready material /li /ul ul li Self-starter with ownership /li li Rigorous, detail-oriented, evidence-based decision making /li li Confident escalator, able to raise concerns early /li li DORA ICT risk management /li li Regulatory engagement with FCA and NFA /li li Operational resilience and testing /li /ul