Senior Risk & Internal Controls Manager

WHSmith Careers; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working model

4pm Friday finish

Flexible working

25 days annual leave plus birthday off

Bank holidays with option to buy extra

Family friendly leave

Company pension scheme

Annual bonus

Cycle to work scheme

Staff discount card

Job summary

WHSmith Europe is seeking a senior Risk & Internal Controls Leader to govern the Group's ERM and internal controls framework. You will coordinate risk assessments, manage control maturity and reporting to senior management, the Risk Committee and the Board.

Hybrid working is available, with potential involvement across London and Swindon locations. The role requires professional qualifications and a proactive, collaborative approach to continuous improvement and transformation initiatives.

Qualifications

• Senior experience in enterprise risk management, internal controls, governance.
• Experience operating within a listed company.
• Ability to facilitate senior governance forums and engage executive stakeholders.
• Proven ability to prepare concise leadership and committee reporting.
• Experience with finance transformation and ERP implementation.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication, facilitation and presentation skills.

Responsibilities

• Lead the ongoing development and embedding of the Group's ERM and internal controls framework.
• Coordinate risk governance forums across global operations.
• Support compliance with Provision 29 of the UK Corporate Governance Code.
• Provide oversight of internal controls maturity and effectiveness.
• Plan and facilitate risk committee meetings and reporting to the Board.
• Drive three lines model and ensure consistent risk and control practices.
• Deliver training to improve risk and controls capability across the business.

Skills

ERM governance

Internal controls

Senior stakeholder engagement

Leadership reporting

ERP implementation

Finance transformation

Analytical thinking

Communication skills

Education

ACA/ACCA/CIA/CRMA/IRM or equivalent

Job description

At WHSmith Europe our people are at the heart of everything we do. They are the ones that go the extra mile for our customers, the ones that enable our growth. This role is to lead the ongoing development, implementation and embedding of the Group's Enterprise Risk Management (ERM) and Internal Controls Framework. The role will coordinate the Group's ERM process, facilitate risk governance forums across European, North American and Australian operations, support compliance with Provision 29 of the UK Corporate Governance Code, and provide oversight of the Group's internal controls maturity and effectiveness.

What you will be doing:

Provision 29 & Internal Controls

• Lead the ongoing implementation and enhancement of the Group's approach to Provision 29 of the UK corporate governance code.
• Coordinate identification, documentation, and periodic assessments of the effectiveness of the Group's material controls (financial, operational, reporting and compliance)
• Develop a proportionate management control self-assessment and certification approach.
• Track and challenge management remediation plans arising from control weaknesses and assurance reviews.
• Coordinate internal control effectiveness reporting for Executive Management, Risk Committee, Audit Committee and Board.
• Maintain and continuously improve the Group Internal Controls Framework. Enterprise Risk Management
• Maintain and continuously improve the Group-wide ERM methodology, guidance, tools and reporting standards across all divisions and functions.
• Coordinate the consistent identification, assessment monitoring and reporting of principal and emerging risks.
• Maintain the Group Principal Risk Register supporting the development and facilitating the ongoing review of risk appetite and tolerance measures.
• Challenge risk assessments and mitigating actions to ensure consistency, robustness and alignment with the ERM framework.
• Produce insightful risk reporting and analysis for senior leadership. Risk Governance & Committees
• Plan, coordinate and facilitate Group Risk Committee meetings, the annual work programme, aligned global risk governance
• Plan, coordinate or support divisional and functional risk committees as required.
• Plan agendas, dashboards, reports and supporting papers.
• Monitor progress against committee actions and decisions.
• Ensure effective escalation and reporting of significant risk and control matters through executive and board governance
• Support the Director of Risk & Audit in preparing relevant reporting for the Audit Committee and Board. Assurance Coordination & Continuous Improvement
• Drive consistent application of a three lines model, clarifying first line ownership, second-line oversight and third-line assurance responsibilities.
• Challenge the maturity and effectiveness of second-line risk and control activities and agree prioritised improvements.
• Support the development of assurance mapping and combined assurance reporting across key functions (e.g. audit, risk, internal controls, info sec, data protection, Health & safety)
• Support major transformation programmes by providing senior risk and controls expertise
• For the ongoing finance transformation and ERP deployment, challenge future-state process and control design, working with Finance, Technology and programme leadership.
• Deliver training and awareness sessions to improve risk and controls capability across the business.

What we are looking for:

• Senior experience in enterprise risk management, internal controls, governance.
• Operating within a listed company.
• Facilitating senior governance forums.
• Engaging with executive stakeholders.
• Preparing concise and impactful Leadership and Committee reporting.
• Experience of finance transformation and ERP implementation
• Professionally qualified (ACA, ACCA, CIA, CRMA, IRM or equivalent) or demonstrable equivalent experience.
• Strong analytical and problem-solving skills.
• Ability to challenge constructively and influence stakeholders
• Excellent written and verbal communication skills.
• Strong facilitation and presentation skills.
• Ability to simplify complex issues for non-specialist audiences.
• High attention to detail whilst maintaining a strategic perspective
• Pragmatic and commercially focused.
• Self-motivated and able to operate independently.
• Collaborative, Resilient and relationship oriented.
• Committed to continuous improvement.

How we reward our teams:

• Hybrid Working Model from home and in the office
• 4pm Friday Finish
• Flexible Working
• 25 Days holiday, plus your Birthday off, plus Bank Holidays with an opportunity to buy extra days holiday
• Family Friendly Leave
• Company Pension scheme
• Annual Bonus based on company and personal performance
• Competitive Salary
• Cycle to work scheme
• Staff Discount Card for railway stores (subject to policy)

About us:

Celebrating over 230 years, we're proud to have grown into a globally recognised brand present in over 30 countries – the air of familiarity people love and trust on their journey. As a diverse group of over 6,000 colleagues, we're all on the same journey to a better business through our commitments to our planet, people and the communities we serve.

Our business operates from two key locations, In a vibrant area of London, close to Aldgate and Liverpool Street Station, while the other is located at Swindon's International Business Park, just off the M4 with excellent transport links and over 100 on-site parking spaces.

For WHSmith Europe, our mission is simple – to create value for our stakeholders by providing a platform for global brands across airports, hospitals, rail stations and other markets. Our operational environment is fast-paced and highly regulated, requiring exceptional standards of maintenance, compliance, health & safety and colleague welfare across every location.

We're all about creating an inclusive and welcoming workplace where everyone can be themselves and do their best. No matter your background, age, disability, gender, gender expression, gender identity, race or ethnicity, marital status, religion, sex, sexual orientation or anything else that makes you, you're welcome here.

We're also open to flexible working where possible, so if that's something you need, let's chat. And if you need any adjustments during the selection process, just let our Talent Acquisition team know—we're happy to help!