Head of Business Risk & Control

Function design - own the design and operation of Moneybox Advice’s first-line risk and control framework across both domains, ensuring it is proportionate, testable and evidenced.

 Line management - manage and develop the Advice Risk & Control Manager and Operations Risk & Control Manager; set the standards for what good control and oversight look like across the two domains and hold both to them.

Integrated MI - bring the advice and operations risk pictures together into a single view of business risk and control health reporting up to the appropriate governance forums.

Control ownership - own the first-line control environment for the advice service delivered by the Advice Risk & Control Manager: the file-review and QA programme, input/output validation, monitoring, stress testing, and the operational running of the T&C scheme owned by the Director of Advice.

Engine assurance - own the evidence that the Advice System is producing suitable output within the system specifications

Interface with the Director of Advice - supply the suitability MI and QA findings the Director of Advice needs to discharge their suitability accountability; consult on specification changes; support T&C evidence.

 Intra-group agreement oversight - own the day-to-day oversight of the service provision - service definitions, service levels, performance MI, remediation and escalation - so that the Advice service can demonstrate effective, continuing oversight of its outsourced critical functions.

Outsourcing oversight - maintain the outsourcing oversight records that support obligations and governance, working through any open items with Legal and Compliance.

Third-party vendors - own the first-line relationship with material third-party providers with contract and service-level management, performance and capacity monitoring against agreed thresholds, service reviews, due-diligence refresh, escalation. 

Operations oversight - oversee, via the Operations Risk & Control Manager, the delivery of customer support, AML/KYC processing and complaints handling which ladder into service level, quality, and the Consumer Duty support outcome. 

Resilience and continuity - coordinate with providers on operational resilience and business continuity arrangements for the services Moneybox Advice depends on, including participation in continuity testing.

Substantial risk and control leadership experience in a regulated retail investment, advice or platform business with hands-on ownership of first-line controls.

Strong working knowledge of COBS 9A suitability requirements, Consumer Duty (PRIN 2A) and the three-lines-of-defence model in practice.

 People leadership experience - managing senior specialist managers and building a small team; setting standards and holding both domains to them.

Track record of producing risk MI that genuinely informs decisions with concise, decision-ready reporting for senior management and committees.

Direct experience of advice-side control including file review, suitability monitoring, QA programme design or T&C and of outsourcing or supplier oversight in a regulated context, including familiarity with SYSC 8 expectations. 

Experience of digital services and of controls over automated systems.

Experience of intra-group service arrangements and the discipline of overseeing a group entity as rigorously as a third party.

Level 4 Diploma in Regulated Financial Planning or an equivalent qualification.

Experience supporting an FCA authorisation, a new regulated service launch, or pre-launch assurance work.

Experience of TPRM frameworks and third-party lifecycle management (onboarding, in-life oversight, exit).