Operational Risk and Controls Analyst

Wellcome Trust; City of Westminster; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A global charitable foundation is seeking an Operational Risk and Controls Analyst to enhance risk management practices. The successful candidate will support various teams in documenting and improving controls, ensuring major risks are effectively managed. Strong communication skills and a proactive approach are essential. This role offers a hybrid working model, combining office and remote work, and contributes to the foundation's mission to improve health for everyone.

Qualifications

• Fundamental understanding of non-financial risk and control frameworks.
• Experience in enterprise risk management or controls testing.
• Relevant professional qualifications.

Responsibilities

• Embed proactive risk management culture across departments.
• Support teams with documenting and monitoring controls.
• Deliver data-driven reports for leadership and governance.
• Conduct second-line control testing for assurance.
• Collaborate to advance enterprise risk management.
• Champion inclusion and adapt to evolving priorities.

Skills

Excellent communication skills

Proactive problem-solving

Ability to work autonomously

Job description

We are looking for an Operational Risk and Controls Analyst join our Risk team.

Where in Wellcome will I be working?

The Risk Team plays a vital role in supporting Wellcome's mission by providing expert guidance and advice on risk management across the organisation. We lead the development and delivery of the corporate risk management framework and business continuity arrangements, ensuring that risks are identified, assessed and managed effectively.

As part of this team, you'll work collaboratively with leaders across all functions, Risk Champions and other stakeholders to embed a proactive risk culture within first‑line management. Your work will help strengthen organisational resilience and enable Wellcome to achieve its goals with confidence.

What will I be doing?

Working across the organisation, you'll embed a proactive risk and compliance culture—partnering with first‑line teams to design, document, monitor and improve controls in line with Wellcome's risk framework, and producing clear, data‑led reports for leadership and governance committees. You'll also support enterprise risk management (including RCSA), carry out second‑line control testing to provide assurance, and collaborate with senior stakeholders to ensure major risks are identified and managed effectively, while role‑modeling our inclusive values and adapting to evolving priorities.

As an Operational Risk and Controls Analyst, you will:

• Partner across departments to embed a proactive risk management culture and ensure effective controls are designed and implemented.
• Support first‑line teams in documenting, monitoring and reporting controls in line with Wellcome's risk framework, while building their capability around risk and compliance.
• Deliver risk processes including contributions to Risk Control Self‑Assessment (RCSA) and provide clear, data‑driven reports for leadership and governance committees.
• Conduct second‑line control testing to give assurance on the effectiveness of controls and strengthen organisational resilience.
• Collaborate with senior colleagues to advance enterprise risk management, ensuring statutory governance requirements are met and major risks are identified and mitigated.
• Champion Wellcome's values by fostering an inclusive culture and adapting to evolving priorities to support our mission.

If you're a proactive problem‑solver who enjoys building strong relationships and collaborating across teams, this role could be for you. You'll need excellent communication skills, adaptability to shifting priorities, and the confidence to work independently while driving improvements in risk and control processes. Experience in enterprise risk management or controls testing, alongside relevant professional qualifications, will help you succeed in delivering Wellcome's mission.

To apply for this role please submit an updated CV and answer two application questions to demonstrate that you meet the minimum requirements for the role.

Minimum Criteria

• Fundamental understanding of non‑financial risk and control frameworks.
• Appropriate enterprise risk management and controls testing (such as internal or external audit) experience.
• Able to work autonomously across enterprise risk and operational controls teams.

Upon a conditional offer being made, the successful applicant for this position will be required to undertake a Basic Disclosure and Barring Service (or equivalent) criminal record check to disclose any 'unspent' criminal convictions or conditional cautions under the Rehabilitation of Offenders Act 1974. The criminal record check will not show anything that is 'spent'.

The Wellcome Trust is a global charitable foundation. We improve health for everyone by funding science, leading policy and advocacy campaigns, and building partnerships. We plan to spend £16bn over the next ten years, funding new discoveries in life, health, and wellbeing, and taking on three global health challenges: mental health, infectious disease and climate and health.

At Wellcome we have a hybrid way of working which is three days in our Euston Road offices (Tuesday, Wednesday and Thursday) with the remaining two days working either remotely or in the office.

Diversity and Inclusion

Diversity and Inclusion is at the heart of everything we do. We are committed to cultivating a fair and inclusive environment, where everyone can be themselves and thrive. We are happy to discuss flexible working options for all roles. We work to ensure that our recruitment processes are as inclusive as possible to everyone. This includes making adjustments for people who have a disability or long‑term condition. Please visit our website for more information on adjustments and accessibility, or contact us at [email].