Head of Enterprise Risk Management (ERM) & Reporting

CFC Underwriting; City Of London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A leading insurance firm is seeking a Head of Enterprise Risk Management (ERM) & Reporting based in London. This role involves leading the risk management framework, enhancing reporting and governance, and overseeing the GRC platform. The ideal candidate will have robust experience in enterprise risk across the financial services sector, with a focus on effective risk governance and reporting. Professional qualifications in risk are highly valued.

Qualifications

• Proven risk leader with significant relevant experience.
• Strong expertise across insurance, reinsurance, or financial services.

Responsibilities

• Lead the design and delivery of the risk management framework.
• Develop enterprise-wide risk reporting and dashboards.
• Oversee Governance, Risk & Compliance (GRC) platform.

Skills

Enterprise risk expertise

Operational risk expertise

Risk framework design

Data integrity

Education

Professional risk qualifications such as IRM or FRM

Job description

Head of Enterprise Risk Management (ERM) & Reporting

Department: Risk

Employment Type: Permanent - Full Time

Location: UK - London

Reporting To: Director, Risk

Description

We are seeking an experienced Head of Enterprise Risk Management (ERM) & Reporting to lead the design and delivery of our enterprise-wide risk management framework, ensuring robust governance, transparency, and reporting across the Group.

You will shape our approach to risk management by developing frameworks, policies, and risk taxonomy; enhancing Group-wide reporting and dashboards; and managing our Governance, Risk & Compliance (GRC) platform. You will also oversee our outsourced Internal Audit provider and support the Audit Committee and Board with clear, data-driven risk insights

Key Responsibilities

Frameworks & Policies

• Design, develop, and maintain the Group Risk Management Framework and associated policies, ensuring alignment with regulatory expectations and best practice.
• Define and maintain the Group’s risk taxonomy, ensuring consistent risk categorisation and reporting across all business functions.
• Periodically review frameworks and policies to ensure they remain relevant, effective, and embedded across the organisation.
• Oversee the Group’s broader policy universe and policy management framework and ensure policies are updated and presented to the correct governance forums at appropriate intervals.

Governance & Oversight

• Provide independent oversight and challenge of risk management practices across the business.
• Provide appropriate risk reporting to the Group’s Compliance & Risk Committees and Boards
• Coordinate internal and external audit activities related to risk, ensuring effective planning, execution, and timely resolution of findings.
• Ensure data integrity, consistency, and effective record management across all risk and control reporting.
• Oversee the day-to-day relationship with the Group’s outsourced Internal Audit provider and services are delivered in line with the IA plan approved by the Audit Committee.

Reporting & Systems

• Develop and deliver enterprise-wide risk reporting and dashboards, ensuring clarity, accuracy, and insight for senior and Board audiences.
• Define and maintain enterprise-level Key Risk Indicators (KRIs), risk appetite metrics, and reporting standards.
• Manage and oversee the Group’s Governance, Risk & Compliance (GRC) platform, ensuring it is effectively configured and used to support risk management, reporting, and governance needs.
• Partner with business and technology teams to drive automation and continuous improvement in risk reporting and management information.

Skills, Knowledge and Expertise

We’re looking for a proven risk leader with the experience and energy to make an impact. Strong enterprise and operational risk expertise across insurance, reinsurance, or financial services is key, and experience in MGAs or the Lloyd’s market will really stand out. You’ll bring sharp insight in risk framework design, reporting, and data integrity, and know how to turn complex information into action. Professional risk qualifications such as IRM or FRM are highly regarded.