Enterprise Risk Manager

Rokstone Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Rokstone Group is seeking an Enterprise Risk Manager to lead the ongoing development and embedding of the ERM framework across the business in a hybrid model based in Greater London. You will act as a trusted second-line risk partner, delivering independent oversight across underwriting, claims, operations, finance, technology and third-party arrangements.

You will manage risk assessments, maintain the risk register, monitor KRIs, produce reporting for senior management and risk committees,

Qualifications

• Extensive experience in enterprise risk management and second-line activities.
• Strong governance knowledge and understanding of the three lines model.
• Experience in insurance or financial services risk environments.
• Ability to engage and challenge senior stakeholders effectively.
• Professional risk qualifications (e.g., ACII/ICA) desirable.

Responsibilities

• Develop and enhance Rokstone’s ERM framework, policies, and methodologies.
• Provide independent second-line oversight across functions; challenge first-line activities.
• Own risk reporting, dashboards, and KRIs for senior management and boards.
• Manage risk events, issues, and remediation tracking; capture lessons learned.
• Lead scenario analysis and monitor emerging risks and regulatory changes.
• Promote risk culture and provide risk training/support to stakeholders.

Skills

Risk reporting

KRI monitoring

Second-line oversight

Stakeholder engagement

Regulatory compliance

Education

ACII or ICA Diploma

Risk management qualification

Job description

Role Summary

The Enterprise Risk Manager is responsible for supporting the ongoing development, implementation, and embedding of Rokstone’s Enterprise Risk Management(“ERM”) Framework. Acting as a trusted second-line risk partner to the business, the role provides independent oversight and challenge across all areas of the organisation, including underwriting, claims, operations, finance, technology, and third-party arrangements. The role will lead risk assessments, support the maintenance of the risk register, monitor key risk indicators and emerging risks, and provide insightful reporting to senior management, Risk Committees, and other governance forums. The Risk Manager will work closely with first-line stakeholders to strengthen the risk and control environment, promote a strong risk culture, and ensure that risk management is embedded within business decision-making as Rokstone continues to grow globally.

Role Accountabilities

Enterprise Risk Management Framework

• Support the ongoing development and enhancement of Rokstone’s ERM Framework, policies, standards, and methodologies.
• Drive consistent application of risk management processes across all business functions.
• Facilitate periodic risk and control assessments across underwriting, claims, finance, operations, technology, and corporate functions.
• Maintain and enhance the enterprise risk register, ensuring risks, controls, actions, and ownership remain current and appropriately documented.
• Support the annual review of the risk appetite framework, including metrics, tolerances, and escalation thresholds.

Risk Oversight and Challenge

• Provide independent second-line oversight and constructive challenge to first-line activities, ensuring key risks are appropriately identified, assessed, and managed.
• Review the effectiveness of controls and challenge remediation plans where weaknesses are identified.
• Support reviews of new products, business initiatives, strategic projects, and operational changes from a risk perspective.
• Identify trends, themes, and emerging risks impacting the business and provide recommendations to management.

Risk Monitoring, MI and Reporting

• Own the production and continuous improvement of risk reporting and dashboards for senior management, Risk Committees, and Boards.
• Monitor Key Risk Indicators(“KRIs”), identifying breaches, deteriorating trends, and emerging areas of concern.
• Work with data and technology teams to improve the quality, automation, and usefulness of risk MI.
• Analyse risk events, incidents, and near misses to identify root causes and systemic control issues.

Risk Events and Issues Management

• Manage the risk event and issue management process, ensuring incidents are appropriately recorded, investigated, escalated, and remediated.
• Track management actions and provide challenge where remediation is delayed or insufficient.
• Ensure lessons learned are captured and embedded into processes and controls.

Scenario Analysis and Emerging Risks

• Lead risk scenario analysis and stress testing activities to assess the potential impact of key risk exposures.
• Maintain oversight of emerging risks, including regulatory change, market developments, technology risks, and operational resilience considerations.

Stakeholder Engagement and Risk Culture

• Develop strong relationships with stakeholders across underwriting, claims, finance, operations, technology, and HR.
• Act as a risk adviser to the business, supporting management in making informed risk-based decisions.
• Promote awareness and understanding of risk management responsibilities across the first line.
• Deliver risk training and awareness initiatives where appropriate.

Role Requirements

• Experience in enterprise risk management, operational risk, internal audit, compliance, or another second-line risk function within insurance or financial services.
• Strong understanding of risk management frameworks, governance structures, and the three lines model.
• Experience operating within a complex insurance environment, ideally including delegated authority, MGA, underwriting, or claims operations.
• Experience leading risk assessments, control reviews, and risk reporting.
• Understanding of regulatory expectations relevant to the insurance sector, including operational resilience and conduct risk.
• Ability to engage and challenge senior stakeholders effectively.
• Relevant professional qualifications (e.g. ICA Diploma, ACII or equivalent) desirable.

Skills and Abilities

• Strong analytical and critical-thinking skills with the ability to assess complex risks and identify underlying themes.
• Ability to provide credible, independent challenge while maintaining effective working relationships.
• Excellent written and verbal communication skills with experience preparing high-quality management and committee reporting.
• Strong stakeholder management skills, with confidence engaging senior leadership.
• Ability to translate risk information into practical and commercially focused recommendations.
• Highly organised with the ability to manage multiple priorities and deliver in a fast-paced, evolving environment.
• Strong attention to detail and commitment to high-quality documentation and reporting.

Management Duties

• No direct reports initially; however, the role is expected to demonstrate leadership across risk initiatives and may support the development of junior team members as the function grows.

We are an equal opportunity employer, and we are proud to share that 93% of our employees say they can be themselves at work. We aim to hire our industry's finest people because the best people drive the best outcomes.

And we forever challenge the status quo because we know there are always ways to improve things. Because together, we're limitless. We value applicants from all backgrounds and foster a culture of inclusivity. We understand the need for flexibility, so work in a hybrid model. Please let us know if you require any reasonable adjustments during the recruitment process.