Risk and Compliance Lead

Conferma; Manchester; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Pension

Life assurance

Private medical scheme

Annual leave 25 days + holidays

Life events paid time off

Birthday leave

Parental leave

Employee Assistance Program (EAP)

Conferma Rewards

Job summary

Conferma is seeking an experienced Risk & Compliance Lead to drive our enterprise approach to compliance, data protection, operational resilience, and risk management. You will design, implement, and continuously improve enterprise frameworks, policies, and training to ensure compliance with evolving UK, EU, and global regulatory requirements.

As a senior leader, you will partner with the business to embed practical, risk-based controls that support growth while protecting Conferma and our

Qualifications

• Experience in risk, compliance, operational resilience or a related field (fintech or payments experience strongly preferred).
• Strong understanding of technology, cloud, data management, and operational risk.
• Proven experience designing and embedding risk and compliance frameworks in a fast-paced environment.
• Exceptional analytical, problem-solving, and communication skills.
• Experience partnering with senior stakeholders and influencing decision making.

Responsibilities

• Own and maintain the Enterprise Risk Universe and enterprise risk register.
• Lead the development and enhancement of Enterprise Risk Management, Operational Resilience, and Data Protection frameworks.
• Ensure compliance with UK, EU, and global privacy, security, and regulatory requirements.
• Provide expert guidance on risk, compliance, regulatory change, AI governance, and third-party risk.
• Oversee customer audits and drive continuous improvement of controls and governance.
• Identify, assess, and monitor strategic and operational risks across the business.
• Provide second-line oversight of cyber, AI, vendor, and emerging risks.
• Produce high-quality risk reporting and insights for senior leadership.
• Build strong stakeholder relationships to embed risk ownership and accountability.
• Design and deliver risk and compliance training, promoting a positive risk culture.
• Drive continuous improvement across risk, governance, and compliance practices.

Skills

Enterprise risk management

Regulatory change management

Stakeholder engagement

Data protection

Job description

At Conferma, our continued success lies in ensuring our policies, procedures and regulations comply with the highest industry standards and meet our customers’ needs and expectations. Driving our strategic intent to be trusted business partner we’re seeking an experienced Risk & Compliance Lead to drive our enterprise approach to compliance, data protection, operational resilience, and risk management.

This role will lead the design, implementation, and continuous improvement of Enterprise frameworks, policies, and training to ensure compliance with evolving UK, EU, and global regulatory requirements.

As a senior risk and compliance leader, you will act as a strategic partner to the business, collaborating across all Conferma teams, to embed practical, risk-based controls that support growth and innovation while protecting Conferma and our clients. Strong communication, stakeholder engagement, and the ability to translate complex regulatory requirements into actionable business guidance are essential.

The role will work alongside the information security governance, risk and compliance (GRC) function, which reports to the CISO, as well as alongside risk owners across the business.

You’ll be responsible for:

• Own and maintain the Enterprise Risk Universe and enterprise risk register.
• Lead the development and enhancement of Enterprise Risk Management, Operational Resilience, and Data Protection frameworks.
• Ensure compliance with UK, EU, and global privacy, security, and regulatory requirements.
• Provide expert guidance on risk, compliance, regulatory change, AI governance, and third‑party risk.
• Oversee customer audits and drive continuous improvement of controls and governance.
• Identify, assess, and monitor strategic and operational risks across the business.
• Provide second‑line oversight of cyber, AI, vendor, and emerging risks.
• Produce high‑quality risk reporting and insights for senior leadership.
• Build strong stakeholder relationships to embed risk ownership and accountability.
• Design and deliver risk and compliance training, promoting a positive risk culture.
• Drive continuous improvement across risk, governance, and compliance practices.

You will have:

• Experience in risk, compliance, operational resilience or a related field (fintech or payments experience strongly preferred).
• Strong understanding of technology, cloud, data management, and operational risk.
• Proven experience designing and embedding risk and compliance frameworks in a fast‑paced environment.
• Exceptional analytical, problem‑solving, and communication skills.
• Experience partnering with senior stakeholders and influencing decision making.
• Expertise in UK and EU data protection laws (UK GDPR, EU GDPR), UK operational resilience regulation, cyber‑security expectations, and AI governance trends. (Desirable)
• A working understanding and awareness of cyber‑security risk sufficient to provide effective second‑line oversight in a fintech environment. (Desirable)

You are:

• Forward thinking and creative: strong business acumen, particularly in determining the significance of data privacy, risk and matters and effectively minimising risks.
• A collaborator: building relationships across teams and enabling the business to adopt best practice.
• A clear communicator: able to translate complex requirements into meaningful business guidance.
• A problem solver: both at tactical and strategic levels. Thinks clearly and quickly about issues. Has an eye for detail and identifies critical information within complex scenarios. Uses the relevant information to make the balanced judgment and follows through to action.
• A connector: collaborating with key stakeholders to monitor, manage and help mitigate risk
• Always learning: Committed to learning and being challenged within their role. Will always be looking to improve their skills and knowledge.

Compensation:

Bonus: 10%

Benefits at Conferma:

At Conferma we understand that our people are what make us great. We have set out to provide a comprehensive benefits package that includes everything you would expect, as well as providing flexibility for you and your family.

• A salary sacrifice pension to maximise your contributions
• Life Assurance cover to provide peace of mind
• Enhanced Company sick pay to put your mind at rest
• Single cover private medical scheme, with the flexibility to add family members at your own cost
• 25 days paid annual leave plus bank holidays, allowing you to focus on what's important to you outside of work
• The ability to purchase up to 10 additional days holiday each year to enable additional time off
• Additional paid time off for life events, such as moving house or getting married
• An additional days leave on or around your birthday
• Enhanced paid parental leave on the birth or adoption of your child
• A confidential Employee Assistance program (EAP) available to all 24/7
• Access a range of fantastic additional rewards, such as Cycle 2Work, Gym Membership, Tech Scheme and discounted shopping and Cinema tickets, via Conferma Rewards

Diversity, Equity and Inclusion

We are committed to ensuring equal opportunity for all. We intend that no job applicant or employee shall receive less favourable treatment, nor be disadvantaged by any conditions or requirements which are irrelevant.