Head of Enterprise & Operational Risk

Overview

In this role you will lead the enterprise and operational risk function, reporting to the Chief Risk Officer. You will redesign and embed the risk framework to be scalable for multi-entity and regulated growth, turning risk into clear, actionable insights. You will work with senior leaders to integrate risk management into business operations and drive credible risk governance. This position offers impact at board level in a mission-driven fintech that champions small businesses. You will shape risk culture and enable smart, risk-informed decision making.

Pay / Benefits

• GymPass health support
• Cycle-to-Work Scheme
• Health and Life Insurance
• Pension Scheme
• 25 days of Annual Leave (+ bank holidays)
• Flexible working hours

Responsibilities

• Redesign the ERMF and translate it into risk appetite statements, KRIs, ownership structures and core controls
• Drive adoption across L1 and L2 leadership, embedding the framework into how the business runs
• Build the control framework, incident management approach and GRC toolset from the ground up
• Create consolidated monthly risk MI for ExCo and the Board
• Lead operational risk scenario analysis for Pillar 2 capital assessment
• Own second line oversight of fraud and cyber risk
• Provide credible challenge to senior stakeholders while remaining pragmatic

Key requirements

• Significant enterprise and operational risk experience in a regulated financial services environment
• Proven track record designing or redesigning an ERMF and embedding it with senior stakeholders
• Experience defining risk appetite, KRIs, ownership structures and governance
• Expertise in building controls frameworks, testing approaches and deficiency management
• Experience with incident management frameworks, GRC tooling decisions and Board-level reporting
• Operational risk scenario analysis and Pillar 2 capital assessment experience
• Second line oversight of fraud risk with cross-functional stakeholder skills
• Experience in high-growth fintech or across multiple jurisdictions is a plus

• credible challenger with pragmatic, commercially aware mindset
• strong stakeholder management and cross-functional collaboration
• clear and concise communication to executive leadership
• ERMF design and embedding
• risk appetite and KRI definition
• controls framework development and deficiency management

…