Risk

• Work through a large population of third-party arrangements, assessing each against established criteria and recording outcomes consistently.
• Coordinate assessment input from relationship owners and stakeholders across the UK and overseas.
• Support identification of material arrangements and confirm the in-scope population for the register.
• Source required data fields for material arrangements from internal repositories, contracts and system records.
• Compile and maintain the register in line with the regulatory template.
• Track progress across both workstreams, maintain trackers, chase outstanding items and report status to the project lead.
• Flag data gaps, inconsistencies and fields with no identified source, escalating what is missing.
• Maintain records of evidence and data sources for future reporting cycles.
• Support the project lead with refined approaches, ad hoc analysis and collation.

Third Party Risk Analyst

• Develop and oversee implementation of the Bank and Group’s Enterprise Risk Management Framework (ERMF).
• Own and maintain the Group and Bank ERMF, including roles, responsibilities and accountabilities across all three lines of defence.
• Complete annual ERMF reviews and refreshes for Board approval, and maintain supporting standards, procedures and guidance.
• Communicate ERMF changes to relevant stakeholders.
• Act as an enterprise risk management SME, providing advice and challenge across all three lines of defence.
• Research leading practices and develop proposals to improve the ERMF.
• Own and maintain the Risk Taxonomy and coordinate its periodic review and refresh for CRO approval.
• Monitor ERMF effectiveness and embedding, take corrective action, and report findings to the Board.
• Refresh, monitor and report on Principal and Material Risks.
• Own and develop the approach and register for emerging risks.
• Develop and maintain the Risk Appetite Framework and coordinate Risk Appetite Statement reviews for Board approval.
• Maintain the risk policy inventory and refresh schedule, advise Policy Owners, challenge policy updates, and coordinate committee approvals.
• Lead reporting, monitoring and development of risk culture.
• Work with Learning & Development on risk management learning programmes and bespoke risk training.
• Provide enterprise risk management material for Annual Report & Accounts, Pillar 3 Disclosures, ICAAP and third-party requests.
• Support risk policy management, risk appetite maintenance, risk taxonomy and risk framework development.
• Support the Bank’s risk data and MI strategy and framework.
• Develop standards and procedures for aggregation and escalation of risk matters to ERC, BRC and the Bank Board.
• Track, embed and report material policy exceptions and risk acceptance requests.
• Support the annual SMF attestation process for the Group Chief Risk Officer.
• Manage, assess, test and develop risks and controls owned within the Risk function, particularly those supporting CRO compliance requirements.

Group Head of Enterprise Risk

• Participate in the Risk Appetite Framework refresh process and align UK International Legal Entity Technology Risk metrics with Enterprise metrics where possible
• Collaborate with enterprise risk type 2LOD teams to coordinate challenge of enterprise and local risk type 1LOD teams
• Understand and communicate the legal entity Technology Risk profile using aggregated data and reporting
• Serve as the main Technology Risk contact for regulators, Audit, International Legal Entity leadership, and Technology Risk program/results requests
• Represent Technology Risk on legal-entity committees and at board meetings as required
• Contribute to International Legal Entity Technology Risk policies and frameworks to ensure UK compliance
• Influence Enterprise Technology Risk frameworks, policies, and programs to ensure they are fit for purpose and support their deployment
• Advise the business on effective execution and applicability of Technology Risk frameworks
• Coordinate with the Enterprise Risk Lead on second-line testing, risk assessments, risk appetite reviews, and review/challenge activities
• Ensure effective communication and aggregation of risks between the International Legal Entity and Enterprise
• Support the UK CRO in oversight duties, reviewing Technology Risk issues and findings and overseeing remediation
• Lead second-line oversight of regulatory change management relating to Technology Risk
• Develop legal-entity metrics dashboards, including Risk Appetite Framework metrics, aligned with regulatory requirements
• Perform second-level reviews of IT, Information Security, Data, AI, and Business Disruption risk questionnaires submitted to regulators
• Participate in operational resilience incident communication channels and monitor incidents that may require regulatory notification under requirements such as DORA

Senior Manager, UK Chief Risk Officer, Technology Risk

• Maintain and enhance Zodia Custody's enterprise risk management framework
• Oversee subsidiary risk programmes across global jurisdictions
• Drive risk governance activities and embed risk management principles throughout the business
• Lead and coordinate risk assessments across operational, strategic, product and crypto asset risk domains
• Facilitate Risk and Control Self-Assessments, control testing and risk identification
• Monitor emerging risks, regulatory developments and financial crime trends affecting the digital asset ecosystem
• Partner with business leaders to develop risk mitigation strategies
• Lead SOC 1 Type II audit activities and coordinate internal and external stakeholder engagements
• Support SOC 2, ISO 27001 and broader risk management assurance programmes
• Work with Internal Audit, external auditors and regulators on assurance outcomes
• Prepare and present risk reporting to senior management, risk committees and boards
• Oversee material risk incidents, remediation activities and risk action plans
• Deliver reporting and recommendations for executive decision-making
• Support operational resilience and business continuity capabilities
• Collaborate with Engineering, Product, Operations and Client Services to strengthen resilience across critical services and processes

Senior Risk Manager

• Lead high-profile technology risk oversight engagements across critical transformation initiatives
• Provide independent challenge and assurance over technology, operational, security, and change risks
• Assess the design and operating effectiveness of key technology controls
• Identify control gaps, weaknesses, and remediation opportunities
• Evaluate governance arrangements and support continuous improvement of the control environment
• Oversee major IT migration and transformation programmes
• Review migration plans, testing strategies, deployment approaches, and cutover readiness
• Monitor programme risks, dependencies, milestones, and control effectiveness
• Ensure alignment with enterprise architecture, regulatory requirements, and security standards
• Provide assurance throughout the full transformation lifecycle
• Help shape the organisation's AI risk, governance, and control framework
• Support the safe and responsible adoption of AI and Agentic AI technologies
• Design and implement controls for reliable, secure, and compliant AI use
• Develop assurance approaches for emerging AI solutions and transformation programmes
• Influence the evolution of AI governance across the business
• Partner with Cyber Security, Information Security, Financial Crime, and Data Protection teams
• Ensure security controls are embedded throughout transformation programmes
• Assess compliance with internal policies and regulatory requirements, including FCA and GDPR obligations
• Support audit and assurance activities through evidence gathering and risk assessments
• Act as a trusted advisor to senior leaders and programme stakeholders
• Present risk insights and assurance outcomes to governance forums and committees
• Build relationships across Technology, Risk, Security, and Delivery functions

Senior Risk Manager – Technology Risk, Transformation

• Lead the design and implementation of NESO’s supplier performance and third-party risk approach
• Develop standard operating procedures, risk mitigation strategies and performance governance
• Manage identified strategic suppliers within the Facilities Management and Professional Services framework
• Work with procurement, legal, compliance, finance, contract managers and suppliers to manage obligations, service levels, controls and regulatory requirements
• Develop supplier risk mitigation strategies and contingency plans
• Own the supplier scorecard methodology and approval process
• Establish and own the supplier risk registers framework, governance, escalations and assurance
• Prepare supplier performance and risk reporting for senior stakeholders, governance forums and assurance activities
• Oversee supplier performance and contractual compliance assurance
• Provide oversight of supplier risk management processes and embedded controls
• Provide guidance and training to internal stakeholders
• Maintain standard operating procedures and build organisational capability
• Monitor industry trends, emerging risks and regulatory changes
• Engage with external stakeholders, regulatory authorities and industry associations

Supplier Performance and Risk Manager

• Provide professional leadership and expert psychological guidance across Corporate Health and Wellbeing
• Lead development and delivery of clinical governance frameworks for Psychological Services
• Lead the quality assurance framework, including clinical standards, policies, procedures and guidance
• Undertake case audits, clinical record reviews and quality assurance activities
• Monitor compliance with professional standards, clinical governance requirements and contractual obligations
• Analyse audits, complaints, incidents, supervision outcomes and service data to identify trends and improvement opportunities
• Develop and implement quality improvement initiatives
• Contribute to governance committees, quality forums, audits, accreditation programmes and client assurance reviews
• Independently review complex, high-risk or escalated psychological cases
• Provide clinical consultation and recommendations on mental health risk, trauma, stress-related conditions, neurodiversity, fitness for work and safeguarding
• Guide clinicians, case managers and operational teams on clinical decision-making and risk management
• Act as lead resource for mental health risk management, including suicide risk, self-harm, risk of harm to others, acute distress, serious mental illness and psychological crises
• Support safeguarding decisions, investigations, referrals and case reviews involving adults and children
• Work with the Designated Safeguarding Lead and Deputy Safeguarding Leads
• Contribute to safeguarding audits, assurance activities, organisational learning, policies, procedures and training
• Lead and maintain the clinical supervision framework
• Provide individual and group clinical supervision
• Coach and mentor clinicians and support reflective practice and competency
• Deliver training, workshops and educational sessions on psychological practice, mental health risk, safeguarding and clinical governance
• Support competency assessments, induction and professional development
• Provide specialist psychological consultation to Occupational Health clinicians
• Contribute psychological expertise to multidisciplinary discussions and case reviews
• Provide guidance on psychological risk factors affecting work capability, recovery and workplace adjustment
• Maintain accurate supervision, audit and governance records
• The role does not involve routine psychological therapy, counselling, assessment or management of a personal clinical caseload
• Report to the Clinical and Quality Assurance Manager

Quality & Governance Lead, Psychological Services

• Provide clients with advice on the journey to buy-in
• Broker the market and support winding up schemes
• Work with clients at various stages of the buy-in journey, including post-transaction buyout and wind-up phases
• Manage a wide portfolio of clients
• Lead client relationships
• Project manage clients to help achieve buyout and winding-up objectives
• Coordinate relevant teams and client stakeholders
• Develop and prepare project plans
• Contribute to setting budgets
• Deliver service excellence in bulk annuity broking and pension scheme wind-ups

Risk Transfer Consultant

• Maintain the accuracy of the risk register across the full range of collective training establishments
• Inform the Training Risk Lead of changes to risk
• Understand relevant training policy and safety management to provide coherence across the risk register
• Support the Training Risk Lead in awareness and utility of the training risk register to reinforce a safety culture
• Record short-notice safety notifications
• Collect, validate, and analyse safety data, including accidents/incidents, near misses, hazards, audits, inspections, and observations
• Support incident and near-miss investigations by providing evidence, analysing contributing factors, and documenting findings
• Support compliance with health and safety legislation, internal policies, and relevant industry standards
• Work with operational teams to promote safety awareness and encourage reporting of hazards and near misses

Safety Risk Analyst

• Provide risk management for force preparation risks and training delivery risks identified through the analysis, design, and delivery of collective training services
• Conduct Functional Safety Analysis, Preliminary Hazard Identification and Analysis (PHI&A), and Organisational Safety Assessments
• Create and manage the Safety Risk Register in accordance with Joint Service Publication 822, 892, and 375
• Identify and manage safety risks against the safe system of work
• Provide oversight and line management of the Safety Risk Analyst
• Identify and escalate risks exceeding thresholds to stakeholders for enhanced mitigation or cessation of training
• Champion the British Army’s training safety culture
• Ensure training risks are tracked, managed, and communicated across key stakeholders

Risk jobs in United Kingdom