The Role
Lead rollout of Risk and Control Self-Assessments, support risk owners to assess inherent/residual risk, track and drive remediation, define control testing, coach First Line stakeholders, maintain risk records in Decision Focus, and prepare governance reporting to transition controls into BAU.
Summary Generated by Built In
Partnering closely with the business the Risk & Controls Manager will support on a key project to move from the control mapping into embedded risk and control management. You will ensure risks, controls and remediation activities are implemented effectively, owned by the business and sustained as part of business as usual operations.
About the role
- Lead the development and rollout of Risk and Control Self-Assessments (RCSAs) across all in-scope business functions, translating Risk and Control Matrices into practical, business-owned assessments.
- Support risk owners to assess inherent and residual risk, evaluate control effectiveness and define proportionate risk treatment plans.
- Track and coordinate remediation arising from control gaps and RCSA outcomes, challenging action owners, maintaining momentum and escalating overdue or high-risk actions through the appropriate governance forums.
- Act as the primary point of contact for business stakeholders throughout implementation, providing hands-on support and coaching the First Line on risks, controls, responsibilities and accountabilities.
- Support the definition of key control testing methodologies, working with control owners to document evidence requirements and testing approaches that are practical, proportionate and effective within BAU processes.
- Drive engagement and confidence in the programme through clear communication, guidance and regular stakeholder support.
- Support the transition from project delivery into BAU ownership by establishing consistent approaches to control monitoring, reporting and governance.
- Maintain accurate and current records of risks, controls and actions within Decision Focus.
- Prepare progress updates, implementation metrics and status reporting, providing visibility of emerging risks, control weaknesses and implementation challenges.
- Support governance forums through clear management information, action tracking and escalation
About you
- Strong experience in operational risk, controls, assurance or a comparable risk management role within a complex organisation.
- Practical experience of designing, implementing or embedding RCSAs and translating risk and control frameworks into business-owned processes.
- Proven ability to manage remediation plans, challenge action owners and drive delivery against agreed timelines.
- Strong business-partnering skills, with the confidence to advise, coach and constructively challenge stakeholders at different levels.
- Clear written and verbal communication skills, including the ability to produce concise management information and governance reporting.
- Sound understanding of risk and control principles, including inherent and residual risk, control design, operating effectiveness and risk treatment.
- Ability to apply proportionate governance and assurance practices in a regulated environment.
- Experience defining control evidence requirements and practical control testing approaches.
- Strong analytical and organisational skills, with the ability to manage multiple actions, dependencies and stakeholders.
- Experience using a governance, risk and compliance platform; familiarity with Decision Focus would be advantageous.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
Skills Required
- Strong experience in operational risk, controls, assurance or comparable risk management role within a complex organisation.
- Practical experience of designing, implementing or embedding Risk and Control Self-Assessments (RCSAs).
- Proven ability to manage remediation plans, challenge action owners and drive delivery against agreed timelines.
- Strong business-partnering skills with confidence to advise, coach and constructively challenge stakeholders at different levels.
- Clear written and verbal communication skills, including ability to produce concise management information and governance reporting.
- Sound understanding of risk and control principles, including inherent and residual risk, control design, operating effectiveness and risk treatment.
- Ability to apply proportionate governance and assurance practices in a regulated environment.
- Experience defining control evidence requirements and practical control testing approaches.
- Strong analytical and organisational skills, with ability to manage multiple actions, dependencies and stakeholders.
- Experience using a governance, risk and compliance (GRC) platform; familiarity with Decision Focus.
CFC Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about CFC and has not been reviewed or approved by CFC.
-
Strong & Reliable Incentives — Variable pay is positioned as a core part of total compensation, with a group‑wide annual bonus highlighted as a consistent feature. Expanding employee share ownership is described as enhancing overall rewards alongside bonuses.
-
Healthcare Strength — Private medical insurance is provided, complemented by dental and optical cashback and a 24/7 employee assistance programme. These elements indicate comprehensive health coverage beyond standard medical plans.
-
Leave & Time Off Breadth — Time away provisions include 25 days of holiday and paid volunteer time, signaling a broad approach to time off. Additional practices such as company social events support overall work–life rhythm, though they are not leave per se.
CFC Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
CFC is a specialist insurance provider, pioneer in emerging risk and market leader in cyber. Their global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today’s most critical business risks.
.png){kind=logo}
