Risk and Control Manager

The AA; Cardiff; Hybrid; GBP 50,000 - 80,000; Full time

Benefits offered by this job

Annual bonus

Car allowance

Private medical insurance

24/7 GP access and wellbeing support

Job summary

The AA is seeking a first-line risk professional to support Roadside B2C risk management. You’ll apply FCA expectations, maintain risk documentation, and coordinate risk events from triage to remediation, working with business owners to ensure effective controls.

You’ll report risk insights to governance forums, challenge remediation plans, and help embed Consumer Duty in day-to-day decisions while benefiting from a generous hybrid working setup in Cardiff.

Qualifications

• Deep understanding of FCA regulatory expectations and Consumer Duty, with the ability to apply them practically in a regulated consumer business.
• Strong risk and control management expertise, including practical experience of risk assessment, designing effective controls, monitoring risk indicators and oversighting customer rectification.
• Experience of risk and incident management, including root cause analysis and developing sustainable remediation.
• Strong analytical and judgement skills, with the ability to work independently, examine evidence, identify underlying causes and reach proportionate conclusions.
• Confidence providing constructive challenge and influencing stakeholders through evidence, policy and methodology.
• Strong communication and stakeholder management skills, including the ability to explain risk clearly, provide constructive challenge and produce clear risk management reporting.
• Good working knowledge of how IT systems, processes and interfaces fit together, with the ability to identify how these can contribute to risk events and control weaknesses.
• Commercially pragmatic, with the ability to balance customer, regulatory and commercial considerations when assessing risk and control issues.

Responsibilities

• Maintain a clear and current Roadside B2C risk register so risks are appropriately identified, assessed, documented and monitored.
• Coordinate the risk event management process from triage through root cause analysis and sustainable closure, supporting business owners to understand underlying causes and deliver proportionate, sustainable remediation.
• Partner with risk and control owners to keep the B2C risk and control environment under active review, reassessing exposure and control effectiveness when events or business changes occur.
• Facilitate the annual B2C Risk and Control Self-Assessment, coordinating evidence review, control testing, constructive challenge and scoring in line with Group methodology.
• Ensure risks, controls, risk events and associated actions are accurately and consistently maintained in the Group risk system, supporting good governance and reliable risk information.
• Work with business owners on risks outside appetite and key risk indicators outside tolerance, constructively challenging the quality of remediation plans, ownership and evidence of progress.
• Produce clear and insightful risk reporting and monitor remediation and audit actions, ensuring governance forums have an accurate view of exposure, control effectiveness, emerging issues and areas requiring attention.

Skills

FCA regulatory

Consumer Duty

Risk management

Controls design

Root cause analysis

Stakeholder management

Job description

Location:Cardiff (Hybrid working, 3 office days per week)
Employment Type: Permanent / Full Time

Why Join Us?

• Annual bonus, car allowance and private medical insurance.
• Play a key role in strengthening the Roadside B2C risk and control environment, helping leaders understand risk and make well-informed decisions.
• Coordinate risk event management and facilitate the annual Risk and Control Self-Assessment
• Build broad stakeholder engagement across Roadside Consumer (B2C) while helping embed effective risk management and Consumer Duty in day-to-day decision-making.

Company Description / Business Unit

For over a century, The AA has been keeping Britain moving. Today, millions of drivers trust us to be there when it matters most, and we’re equally committed to supporting the people who make that possible. With a 4.5-star Glassdoor rating, we’ve built a culture where colleagues are empowered to grow, collaborate and make a real impact for our customers on every journey. Which has been recognised by Sunday Times "Best Places to Work" for the last two years.

Job Description

If you enjoy getting underneath complex issues, examining evidence and helping a business apply risk standards consistently, this is an opportunity to make a practical impact within Roadside B2C.

Working alongside Roadside B2C leaders as a first-line risk professional, you’ll bring framework knowledge, sound judgement and constructive challenge to help business owners manage risk effectively. You’ll facilitate the required risk and control processes, examine evidence, maintain the quality of risk documentation and help ensure risk, control and remediation activity is completed consistently and to the required standard.

You’ll coordinate risk event management from initial triage through root cause analysis and sustainable closure, working with the relevant business owners to make sure underlying causes are understood, remediation is proportionate and effective, and lessons learned strengthen the control environment. You’ll also facilitate the annual B2C Risk and Control Self-Assessment and provide clear, well-evidenced reporting for risk management and governance forums.

Key Responsibilities

• Maintain a clear and current Roadside B2C risk register so risks are appropriately identified, assessed, documented and monitored.
• Coordinate the risk event management process from triage through root cause analysis and sustainable closure, supporting business owners to understand underlying causes and deliver proportionate, sustainable remediation.
• Partner with risk and control owners to keep the B2C risk and control environment under active review, reassessing exposure and control effectiveness when events or business changes occur.
• Facilitate the annual B2C Risk and Control Self-Assessment, coordinating evidence review, control testing, constructive challenge and scoring in line with Group methodology.
• Ensure risks, controls, risk events and associated actions are accurately and consistently maintained in the Group risk system, supporting good governance and reliable risk information.
• Work with business owners on risks outside appetite and key risk indicators outside tolerance, constructively challenging the quality of remediation plans, ownership and evidence of progress.
• Produce clear and insightful risk reporting and monitor remediation and audit actions, ensuring governance forums have an accurate view of exposure, control effectiveness, emerging issues and areas requiring attention.

Qualifications

You’ll Bring

• Deep understanding of FCA regulatory expectations and Consumer Duty, with the ability to apply them practically in a regulated consumer business.
• Strong risk and control management expertise, including practical experience of risk assessment, designing effective controls, , monitoring risk indicators and oversighting customer rectification.
• Experience of risk and incident management, including root cause analysis and developing sustainable remediation.
• Strong analytical and judgement skills, with the ability to work independently, examine evidence, identify underlying causes and reach proportionate conclusions.
• Confidence providing constructive challenge and influencing stakeholders through evidence, policy and methodology.
• Strong communication and stakeholder management skills, including the ability to explain risk clearly, provide constructive challenge and produce clear risk management reporting.
• Good working knowledge of how IT systems, processes and interfaces fit together, with the ability to identify how these can contribute to risk events and control weaknesses.
• Commercially pragmatic, with the ability to balance customer, regulatory and commercial considerations when assessing risk and control issues.

Nice to Have

• Experience using AA/Group risk systems, or similar risk and control platforms, to maintain accurate and consistent risk information.
• Experience presenting risk insight through management or governance forums.

Additional Information

Belonging at The AA

At The AA, we value the unique perspectives, experiences and ideas that our people bring. We’ve nurtured a workplace where everyone feels valued, respected and empowered to do their best work.
Through our employee communities and inclusion initiatives, we’ve created opportunities for people to connect, share experiences and influence positive change across the business. This is a place where your voice matters and where you can belong, grow and succeed.

Driven by People, Rewarded by Benefits

We believe in rewarding our people. That's why we offer a comprehensive benefits package including;

• 25 days' annual leave plus bank holidays, the option to buy additional holiday
• Up to 7% employer pension contribution
• Free AA breakdown membership from Day One with 50% discount for family and friends, discounts on AA products including car and home insurance
• 24/7 GP access and wellbeing support for you and your family
• A wide range of employee discounts, including our popular car salary sacrifice scheme

#LI-SJ1 #LI-Hybrid