Risk & Controls Framework and Governance Lead

NatWest Group; London; Remote; GBP 100,000 - 125,000; Full time

Job summary

A leading financial institution in London is seeking a Risk & Controls Framework and Governance Lead to oversee IT risk assessments and drive a proactive risk management culture. The ideal candidate will possess strong regulatory and operational risk experience, along with expertise in data analysis and stakeholder engagement. This position offers an excellent opportunity for career advancement in a remote-first working environment.

Qualifications

• Expertise in risk management methodologies.
• Practical experience in regulatory and operational risk in technology.
• Proficiency in process and control design.

Responsibilities

• Oversee IT risk assessments and deliver outputs on time.
• Lead the delivery of risk management culture.
• Engage with stakeholders to provide risk guidance.
• Build a network of key contacts and influencers.

Skills

Risk management methodologies

Regulatory risk experience

Operational risk experience

Financial services industry experience

IT service management processes

Data analysis for decision making

Understanding of Risk & Control self-assessment

Job description

Join us as a Risk & Controls Framework and Governance Lead

• If you have regulatory and operational risk experience in a technology environment, this is an excellent opportunity to join our team
• You'll be applying effective risk management and decision making capability within an IT environment, anticipating and assessing the potential impacts of risk across the bank
• You'll have an ideal platform for building your network and advancing your career, while helping to create a safer environment for the bank

What you'll do

We'll look to you to oversee and lead the delivery of IT risk assessments business-wide, delivering outputs in line with agreed timelines and required quality levels. You'll play a key role in helping C&I CDIO identify and assess material IT risks and determine their position relative to agreed appetites, and you'll also collaborate with senior stakeholders across the function to drive forward the development and delivery of remedial action plans, where identified risks are considered out of appetite.

Your other key responsibilities will include:

• Providing risk leadership and advocacy, supporting a culture of proactive and pre-emptive risk management and continuous improvement, and the achievement of operational risk objectives
• Directing the technology response for business Risk & Control self-assessments by delivering technical and risk expertise, ensuring alignment on outcomes and clarity on remediation steps
• Engaging proactively with key stakeholders across the business to provide informed guidance on any changes that may affect the underlying risk landscape
• Providing a centre of excellence for risk management with responsibilities for embedding tools and techniques for managing risk and applying the necessary governance
• Leading the engagement with key stakeholders across Technology and in our functions and franchises, including the second line of defence and Internal Audit
• Leading a team and delivering effective coaching to colleagues where performance needs are identified, and developing and delivering relevant training
• Building and maintaining a network of key contacts and influencers

The skills you'll need

To be successful in this role, you'll have expertise in risk management methodologies and practical experience of regulatory and operational risk in a technology environment. You'll also have experience of assuring the adequacy and effectiveness of processes and controls, coupled with knowledge of control and process design methods.

On top of this, you'll bring:

• Experience in the financial services industry
• Strong knowledge of IT service management processes
• An understanding of the Risk & Control self-assessment process
• Proficiency in analysing data to derive actionable insights and drive informed decision-making
• The ability to swiftly respond and comprehend the implications of changes in the risk framework, ensuring ongoing compliance and effective implementation
• Knowledge of service delivery, change management and security processes from a technology perspective

Hours
35

Job Posting Closing Date:
14/08/2025

Ways of Working:Remote First