Senior Risk & Internal Controls Manager

WHSmith; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid Working Model from home and in

4pm Friday Finish

Flexible Working

25 Days holiday, plus your Birthday

Bank Holidays with opportunity to buy

Family Friendly Leave

Company Pension scheme

Annual Bonus

Cycle to work scheme

Staff Discount Card

Job summary

WHSmith Europe is seeking a senior risk and internal controls professional to lead the design, delivery and embedding of the enterprise risk management framework. You will coordinate ERM processes, support governance across global operations, and ensure compliance with the UK Corporate Governance Code provisions.

Role focuses on assurance, three-lines model, and reporting to senior leadership, with involvement in finance transformation and ERP initiatives to strengthen controls and risk

Qualifications

• Senior experience in enterprise risk management and internal controls.
• Experience of governance in a listed company and executive reporting.
• Ability to facilitate senior governance forums and engage with executives.
• Experience of finance transformation and ERP deployment.
• Professionally qualified (ACA, ACCA, CIA, CRMA, IRM or equivalent) or demonstrable equivalent experience.

Responsibilities

• Lead ongoing implementation and enhancement of Provision 29 and internal controls.
• Coordinate identifications, documentation and assessments of control effectiveness.
• Develop self-assessment and certification approaches for controls.
• Track remediation plans and assurance reviews with senior management.
• Coordinate reporting for the Audit Committee, Board and executives.
• Maintain Group Internal Controls Framework and ERM methodology.
• Coordinate risk identification, assessment, monitoring and reporting.
• Support risk committees and governance forums across functions and regions.
• Drive three lines model adoption and continuous improvement of risk activities.
• Contribute to major transformation programmes and ERP initiatives.

Skills

ERM experience

Internal controls

Governance

Stakeholder engagement

Analytical skills

Communication skills

Education

ACA, ACCA, CIA, CRMA, IRM or equivalent

Tools

ERP systems

Governance tools

Job description

At WHSmith Europe our people are at the heart of everything we do. They are the ones that go the extra mile for our customers, the ones that enable our growth. This role is to lead the ongoing development, implementation and embedding of the Group's Enterprise Risk Management (ERM) and Internal Controls Framework. The role will coordinate the Group's ERM process, facilitate risk governance forums across European, North American and Australian operations, support compliance with Provision 29 of the UK Corporate Governance Code, and provide oversight of the Group's internal controls maturity and effectiveness.

What you will be doing:

Provision 29 & Internal Controls

• Lead the ongoing implementation and enhancement of the Group's approach to Provision 29 of the UK corporate governance code.
• Coordinate identification, documentation, and periodic assessments of the effectiveness of the Group's material controls (financial, operational, reporting and compliance)
• Develop a proportionate management control self-assessment and certification approach.
• Track and challenge management remediation plans arising from control weaknesses and assurance reviews.
• Coordinate internal control effectiveness reporting for Executive Management, Risk Committee, Audit Committee and Board.
• Maintain and continuously improve the Group Internal Controls Framework.
• Maintain and continuously improve the Group-wide ERM methodology, guidance, tools and reporting standards across all divisions and functions.
• Coordinate the consistent identification, assessment monitoring and reporting of principal and emerging risks.
• Maintain the Group Principal Risk Register supporting the development and facilitating the ongoing review of risk appetite and tolerance measures.
• Challenge risk assessments and mitigating actions to ensure consistency, robustness and alignment with the ERM framework.
• Produce insightful risk reporting and analysis for senior leadership.

Risk Governance & Committees

• Plan, coordinate and facilitate Group Risk Committee meetings, the annual work programme, aligned global risk governance
• Plan, coordinate or support divisional and functional risk committees as required.
• Plan agendas, dashboards, reports and supporting papers.
• Monitor progress against committee actions and decisions.
• Ensure effective escalation and reporting of significant risk and control matters through executive and board governance
• Support the Director of Risk & Audit in preparing relevant reporting for the Audit Committee and Board.

Assurance Coordination & Continuous Improvement

• Drive consistent application of a three lines model, clarifying first line ownership, second-line oversight and third-line assurance responsibilities.
• Challenge the maturity and effectiveness of second-line risk and control activities and agree prioritised improvements.
• Support the development of assurance mapping and combined assurance reporting across key functions (e.g. audit, risk, internal controls, info sec, data protection, Health & safety)
• Support major transformation programmes by providing senior risk and controls expertise
• For the ongoing finance transformation and ERP deployment, challenge future-state process and control design, working with Finance, Technology and programme leadership.
• Deliver training and awareness sessions to improve risk and controls capability across the business.

What we are looking for:

• Senior experience in enterprise risk management, internal controls, governance.
• Operating within a listed company.
• Facilitating senior governance forums.
• Engaging with executive stakeholders.
• Preparing concise and impactful Leadership and Committee reporting.
• Experience of finance transformation and ERP implementation
• Professionally qualified (ACA, ACCA, CIA, CRMA, IRM or equivalent) or demonstrable equivalent experience.
• Strong analytical and problem-solving skills.
• Ability to challenge constructively and influence stakeholders
• Excellent written and verbal communication skills.
• Strong facilitation and presentation skills.
• Ability to simplify complex issues for non-specialist audiences.
• High attention to detail whilst maintaining a strategic perspective
• Pragmatic and commercially focused.
• Self-motivated and able to operate independently.
• Collaborative, Resilient and relationship oriented.
• Committed to continuous improvement.

How we reward our teams:

• Hybrid Working Model from home and in the office
• 4pm Friday Finish
• Flexible Working
• 25 Days holiday, plus your Birthday off, plus Bank Holidays with an opportunity to buy extra days holiday
• Family Friendly Leave
• Company Pension scheme
• Annual Bonus based on company and personal performance
• Cycle to work scheme
• Staff Discount Card for railway stores (subject to policy)

About us:

Celebrating over 230 years, we’re proud to have grown into a globally recognised brand present in over 30 countries – the air of familiarity people love and trust on their journey. As a diverse group of over 6,000 colleagues, we’re all on the same journey to a better business through our commitments to our planet, people and the communities we serve.

Our business operates from two key locations, In a vibrant area of London, close to Aldgate and Liverpool Street Station, while the other is located at Swindon's International Business Park, just off the M4 with excellent transport links and over 100 on-site parking spaces.

For WHSmith Europe, our mission is simple – to create value for our stakeholders by providing a platform for global brands across airports, hospitals, rail stations and other markets. Our operational environment is fast-paced and highly regulated, requiring exceptional standards of maintenance, compliance, health & safety and colleague welfare across every location.

We’re all about creating an inclusive and welcoming workplace where everyone can be themselves and do their best. No matter your background, age, disability, gender, gender expression, gender identity, race or ethnicity, marital status, religion, sex, sexual orientation or anything else that makes you, you—you’re welcome here.

We’re also open to flexible working where possible, so if that’s something you need, let’s chat. And if you need any adjustments during the selection process, just let our Talent Acquisition team know—we’re happy to help!