Risk Manager

Timeline

City Of London

Remote

GBP 90,000 - 130,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Hybrid working

Non-contractual bonus scheme

Insurance plans

28 days holiday plus bank holidays

Cost of relevant qualifications

Job summary

Timeline is a private fintech company enabling retirement planning nationwide. We seek an experienced Risk Manager to lead the enterprise risk framework, KRIs and third-party risk oversight in the 2nd line of defence.

The role reports to the Chief Risk and Compliance Officer and requires pace with rigour. You will embed risk processes across the business, maintain risk registers, and drive resilience, incident investigations, and governance reporting.

Qualifications

6+ years' experience in a risk management role within an FCA-regulated investment firm.
Experience designing and embedding enterprise risk management frameworks, including risk registers, KRIs, risk appetite statements, resilience and third party risk
Strong working knowledge of FCA rules including SYSC, PRIN, and prudential requirements (ICARA/MIFIDPRU)
Hands-on experience of operational resilience frameworks, including important business services mapping, impact tolerance-setting, and BCP/DR maintenance and testing
Familiarity with Consumer Duty, SM&CR, and third-party risk management
Experience working across second-line functions with first-line business owners
Excellent written communication skills, with the ability to prepare board-level documentation
Proven ability to work independently and at pace in a fast-paced, evolving environment

Responsibilities

Maintain top-down and bottom-up risk assessments and registers with stakeholders across the business.
Support the Board approval of risk appetite statements.
Review, calibrate and maintain KRIs across all business areas.
Implement 3rd party risk frameworks and oversight suitable for the scale and complexity of the business.
Coordinate quarterly risk assessment cycles across business units.
Maintain and enhance incident investigation processes, ensuring timely escalation and closure of actions.
Review and update Business Continuity Plan and Disaster Recovery arrangements.
Coordinate scenario testing of BCP and DR and track remediation actions.
Prepare risk-focused board and committee papers and contribute to governance embedding.

Skills

ERM framework

KRI design

Board reporting

Third-party risk

Regulatory knowledge

Stakeholder engagement

Education

IRM/CISI certifications desirable

Tools

GRC tools

Job description

The Company

Timeline is a financial technology company on a mission to help millions of people plan, invest for, and enjoy retirement with confidence.

As a privately owned fast-growing fintech company providing Platform, MPS and financial planning solutions, we are well placed to disrupt the traditional financial services market. Our technology cuts out unnecessary costs, inefficiencies and anxiety for financial advisers, while improving the long-term investment returns for their clients.

We are a remote-first company with team members in over 13 countries. And given our diversity of thought, backgrounds and life experiences, we are constantly striving to celebrate individual uniqueness, while achieving our common mission. As a scaling, high-growth company, developing and adapting are the norm. If you're after a dynamic company where you will make a real difference, then read on!

The Role

We are seeking an experienced Risk Manager to join our Risk and Compliance team on a permanent basis, with a focus on embedding the enterprise risk management framework, strengthening KRI coverage, enhancing resilience and third party risk oversight, with long-term ownership of the risk framework.

The role sits within the second line of defence and reports directly to the Chief Risk and Compliance Officer, and requires someone who can operate at pace without sacrificing rigour while building the enduring capabilities the business needs.

Role Responsibilities

Risk Framework

Maintain the top-down and bottom-up risk assessments and registers, engaging with stakeholders across the business
Support the maintenance and Board approval of risk appetite statements
Review, enhance, calibrate and maintain KRIs across all business areas, ensuring thresholds are aligned to risk appetite

3rd Party and Operational Risk

Implement 3rd party risk frameworks and oversight suitable for the scale and complexity of the business
Support the quarterly risk assessment cycle across business units
Maintain and enhance incident investigation processes, ensuring timely escalation, root cause analysis, closure of actions and reporting

Operational Resilience and Business Continuity

Review and maintain the Business Continuity Plan and associated Disaster Recovery arrangements, ensuring they reflect Timeline's operating model including the platform
Support the annual operational resilience self-assessment, including mapping of important business services, setting impact tolerances and testing arrangements
Coordinate scenario testing of BCP and DR arrangements, document outcomes, and track remediation actions
Assess the operational resilience implications of new business initiatives and platform migrations, providing second-line input to project governance

Governance and Reporting

Prepare risk-focused board and committee papers, including standing RCC reports
Support the ICARA process, including scenario stress testing and wind-down planning, in coordination with Finance and the Chief of Risk and Compliance Officer
Contribute to governance embedding, including supporting Terms of Reference development for risk-related committees
Take ongoing ownership of the risk management framework

Stakeholder Engagement

Collaborate with SLT and the first line to embed risk processes within the business
Maintain clear documentation all aspects of the risk framework

Role Requirements

Core knowledge & experience:

6+ years' experience in a risk management role within an FCA-regulated investment firm
Demonstrable experience designing and embedding enterprise risk management frameworks, including risk registers, KRIs, risk appetite statements, resilience and third party risk
Strong working knowledge of FCA rules including SYSC, PRIN, and prudential requirements (ICARA/MIFIDPRU)
Hands-on experience of operational resilience frameworks, including important business services mapping, impact tolerance-setting, and BCP/DR maintenance and testing
Familiarity with Consumer Duty, SM&CR, and third-party risk management
Experience working across second-line functions with first-line business owners
Excellent written communication skills, with the ability to prepare board-level documentation
Proven ability to work independently and at pace in a fast-paced, evolving environment

Ideal knowledge & experience:

Experience in a discretionary fund manager, MPS provider or investment platform business
Familiarity with third-party oversight frameworks
Experience using GRC platforms or data tools to support risk reporting
Professional qualifications (e.g., IRM, CISI) desirable but not essential

The Package