Head of Risk

InvestEngine; Greater London; Hybrid; GBP 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid working (London)

Transparent culture

Room to grow

Job summary

InvestEngine is seeking a Head of Risk in London (hybrid) to lead our second line of defence and develop a proportionate enterprise risk management framework for an investment platform. You will work with product, operations, technology and finance, reporting to the Chief Risk & Compliance Officer.

In this senior role, you will embed ownership, raise risk assessment quality, and provide independent risk input to senior management and the Board through clear, decision-useful reporting and risk

Qualifications

• Built or improved an enterprise risk management framework (ERMF) or substantial parts of one.
• Translates policy into practical workflows and training for first-line teams.
• Maintains strong risk and control judgement and challenges senior stakeholders when needed.

Responsibilities

• Lead the second line to build and continuously improve the ERMF for an investment platform.
• Turn framework into practical workflows, templates, guidance and training for busy teams.
• Chair the Executive Risk Committee and provide MI to the Audit & Risk Committee and Board.

Skills

ERMF development

Policy-to-workflows

Risk governance

Board reporting

FCA risk knowledge

English proficiency

Tools

AI tools

Job description

InvestEngine is everything the modern investor should need: unbeatable value, market-leading automation, and a platform built for easy, long-term investing.

We’ve built a strong foundation, with over £3.5 billion invested, award-winning service, and a passionate team. We’re an FCA-regulated investment platform growing fast — and our approach to risk needs to scale with us.

About the Role

We’re looking for a Head of Risk to lead our second line of defence, based in London (hybrid). This is a senior, hands-on role in a lean team: you’ll build and improve things yourself rather than oversee a large function.

Your mission is to build, maintain and continuously improve a proportionate enterprise risk management framework that genuinely works for an investment platform — and to turn it into clear, practical ways for business teams to identify, own, manage and evidence their risks and controls. At the same time, you’ll provide independent challenge and decision-useful risk insight to senior management, the Audit & Risk Committee and the Board.

You’ll report to our Chief Risk & Compliance Officer and work closely with Product, Operations, Technology and Finance.

What You’ll Do

• Assess our existing ERMF, methodology and registers, keep what works, and agree a prioritised, risk-based improvement plan in your first 90 days
• Turn the framework into practical workflows, templates, guidance and training that busy first-line teams can actually use — covering RCSAs, controls, events and escalation
• Embed clear ownership: make sure priority processes have named process, risk and control owners who understand and evidence their responsibilities
• Raise the quality of risk assessments, risk statements and control evidence, and challenge unsupported conclusions
• Lead the enterprise-wide risk assessment (EWRA), bringing together owner views, second-line challenge, evidence gaps and material interconnections
• Design and deliver a proportionate risk-based assurance plan, with clear KRIs, monitoring and escalation of material issues
• Chair the Executive Risk Committee as a second-line forum overseeing risk appetite and functional risks
• Provide the Audit & Risk Committee and Board with accurate, timely MI and metrics on exposures against appetite, trends, control weaknesses and actions
• Provide independent risk input and challenge to our Finance-led ICARA, linking material harms and scenarios to the enterprise risk profile

What We’re Looking For

• You have personally built an ERMF or material parts of one, and improved an existing framework — connecting taxonomy, appetite, assessments, controls, KRIs, events and assurance
• A track record of translating policy into workflows and training that first-line teams adopt, without taking over their ownership
• Strong risk and control judgement: cause–event–impact thinking, inherent and residual risk, design and operating effectiveness
• Confidence to challenge senior stakeholders constructively while building trust and protecting second-line independence
• Experience running risk governance and producing clear, decision-useful reporting for committees and the Board
• Solid understanding of FCA risk and systems-and-controls expectations for a UK regulated firm, including customer harm, CASS, operational resilience, technology and third-party risk
• Comfortable in a fast-moving, lean environment: you prioritise, deliver proportionate solutions and use modern tools — including AI — to work smarter
• English fluency at C1 level or above — we are a UK-based company and the role involves regular communication across the business

Nice to Have

• Practical experience of MIFIDPRU / IFPR and ICARA: material-harm assessments, stress and reverse-stress scenarios, wind-down planning, or independent challenge of a Finance-led ICARA
• Experience at a growing UK investment platform, execution-only or managed investment services, or a similarly regulated fintech

How We Work

We’re a lean, fast-moving team that values clarity, ownership and transparency. You’ll have the freedom to improve how things work, the responsibility to follow through, and the backing of a team that values clear thinking and open dialogue.

What We Offer

• Impact from day one: you’ll shape how risk is understood and managed across the whole business, with direct visibility to the Board
• Room to grow: as InvestEngine scales, you’ll help shape how risk management develops across the company
• Transparent and open culture and a supportive, high-calibre team
• Hybrid working from our office in Southwark, London

Our Hiring Process

• Introductory call with our Talent team
• Interview with the hiring manager
• Practical exercise: a short risk scenario, presented back
• Final interview with our CEO

We aim to keep the process straightforward, transparent and efficient.