Head of Risk and Regulatory Assurance Job at 360 Resourcing Solutions (London Bridge)

Head of Governance, Risk and Compliance - CISO function - BPL

The Head of GRC leads the pillar responsible for ensuring the organisation under...

Location

United Kingdom , London

Salary:

Not provided

Barclays

Expiration Date

Until further notice

Requirements

CISM, CRISC, or CISSP certification
Experience with DORA (Digital Operational Resilience Act) compliance requirements and implementation
ISO 27001 Lead Auditor or Lead Implementer certification
PCI QSA or Internal Security Assessor (ISA) qualification
Previous experience in FinTech, Digital Banking, Payment Acquiring organisation
Experience with Visa GACS and Mastercard SDP acquirer compliance programmes
Significant experience of progressive experience in information security governance, risk, and compliance, with at least 5 years leading a GRC team in a regulated environment
Strong understanding of UK GDPR and the role of security controls in meeting data protection obligations, including breach notification requirements and data protection impact assessments
Experience designing and operating security control frameworks mapped to multiple regulatory requirements simultaneously (e.g., a single framework serving PCI DSS, FCA, and GDPR)
Understanding of cloud-native architectures and their implications for compliance and risk management

Job Responsibility

Own the security policy framework, ensuring policies are current, proportionate, and aligned to PCI DSS, FCA expectations, UK GDPR, and DORA requirements
Maintain and operate the security risk register, ensuring risks are assessed consistently using a defined methodology, owned explicitly, and reported accurately to the CISO and Executive Leadership Team (ETL)
Manage the relationship with external auditors, the Qualified Security Assessor (QSA), and 2nd/3rd Line of Defence (LoD) on all security and technology risk matters
Own the third-party security assurance process, ensuring all vendors, partners, and card scheme integrations are risk-assessed with a tiered approach proportionate to data access and criticality
Chair the monthly Cyber and Tech Risk and Controls Forum, presenting risk posture, compliance status, and material findings to the CISO, CIO and ELT
Design and maintain the control framework, mapping controls to PCI DSS, FCA, UK GDPR, and DORA requirements, and ensuring control effectiveness is tested on a continuous cycle
Produce KRI dashboards and risk reporting for CISO, CIO, and ELT consumption, ensuring risk is communicated in business terms
Lead regulatory and audit engagement on security matters, coordinating regulatory review and audit interactions and proactively managing stakeholder relationships
Own the risk assessment calendar, ensuring both cyclical and event-driven assessments are executed on schedule with appropriate rigour
Manage the risk acceptance process, ensuring risk acceptance decisions are documented, time-bound, approved at the appropriate authority level, and reviewed before expiry

What we offer

Competitive holiday allowance
Life assurance
Private medical care
Pension contribution

Fulltime

Head of Risk & Compliance

Our client is a major law firm looking for a senior level consultant to act as H...

Location

United States , New York, New Haven, Greenwich

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Juris Doctor required, along with active U.S. Bar admission in good standing
At least 6–8 years of experience in law firm risk management, ethics, conflicts, responsibility-related matters, or a General Counsel's office
Prior people leadership experience with the ability to manage teams and influence senior stakeholders effectively
Strong background in risk analysis, due diligence, and development of practical risk management strategies
Knowledge of anti-money laundering principles, regulatory compliance, and governance practices relevant to legal environments
Demonstrated ability to handle conflicts reviews, ethical issues, and other complex matters requiring sound judgment
Familiarity with law firm conflicts and intake technology, including platforms such as Intapp, is strongly preferred

Job Responsibility

Strategic Leadership: Direct the US-based risk and compliance function, aligning regional strategies with global standards and overseeing the performance of a dedicated departmental team
Operational Governance: Manage the full lifecycle of new business intake (NBI), including complex conflicts resolution, ethical screens, and the negotiation of engagement terms or waivers
Regulatory & Policy Oversight: Lead 'horizon scanning' to identify emerging legal trends, drafting and updating internal policies to ensure the firm remains compliant with state and federal legislation
Financial & Professional Integrity: Coordinate with AML, Sanctions, and Professional Indemnity managers to mitigate financial crime risks and support the management of professional liability claims
Cross-Functional Collaboration: Serve as a key advisor to executive leadership (Finance, HR, and Counsel) on sensitive regulatory matters, professional ethics, and high-risk decision-making
Risk Mitigation for Growth: Provide structured risk assessments for major firm initiatives, such as lateral partner hiring, new office launches, and high-stakes client matters
Training & Quality Assurance: Design and deliver comprehensive training programs for attorneys and staff regarding confidentiality, information handling, and ethical obligations
Data & Reporting: Maintain critical risk registers and deliver high-level reporting to the Partnership Board, ensuring transparency on departmental performance and risk exposure

What we offer

medical, vision, dental, and life and disability insurance
enrollment in company 401(k) plan

Fulltime

Head of Risk & Compliance

Our client is a major law firm looking for a senior level consultant to act as H...

Location

United States , New York

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Juris Doctor required, along with active U.S. Bar admission in good standing
At least 6–8 years of experience in law firm risk management, ethics, conflicts, responsibility-related matters, or a General Counsel's office
Prior people leadership experience with the ability to manage teams and influence senior stakeholders effectively
Strong background in risk analysis, due diligence, and development of practical risk management strategies
Knowledge of anti-money laundering principles, regulatory compliance, and governance practices relevant to legal environments
Demonstrated ability to handle conflicts reviews, ethical issues, and other complex matters requiring sound judgment
Familiarity with law firm conflicts and intake technology, including platforms such as Intapp, is strongly preferred

Job Responsibility

Strategic Leadership: Direct the US-based risk and compliance function, aligning regional strategies with global standards and overseeing the performance of a dedicated departmental team
Operational Governance: Manage the full lifecycle of new business intake (NBI), including complex conflicts resolution, ethical screens, and the negotiation of engagement terms or waivers
Regulatory & Policy Oversight: Lead horizon scanning to identify emerging legal trends, drafting and updating internal policies to ensure the firm remains compliant with state and federal legislation
Financial & Professional Integrity: Coordinate with AML, Sanctions, and Professional Indemnity managers to mitigate financial crime risks and support the management of professional liability claims
Cross-Functional Collaboration: Serve as a key advisor to executive leadership (Finance, HR, and Counsel) on sensitive regulatory matters, professional ethics, and high-risk decision-making
Risk Mitigation for Growth: Provide structured risk assessments for major firm initiatives, such as lateral partner hiring, new office launches, and high-stakes client matters
Training & Quality Assurance: Design and deliver comprehensive training programs for attorneys and staff regarding confidentiality, information handling, and ethical obligations
Data & Reporting: Maintain critical risk registers and deliver high-level reporting to the Partnership Board, ensuring transparency on departmental performance and risk exposure

What we offer

medical, vision, dental, and life and disability insurance
enrollment in company 401(k) plan

Head of Risk & Compliance

Giacom is looking for a Head of Risk & Compliance who will take the lead in deve...

Location

United Kingdom , Nelson

Salary:

Not provided

Giacom

Expiration Date

Until further notice

Requirements

Demonstrable prior experience in risk management, ideally in a regulated sector (Telecoms, Utilities, etc.)
Proven experience designing and leading an effective ERM and compliance framework in a medium/large organisation
Understanding of Health & Safety obligations and the ability to embed effective, risk‑based Health & Safety practices across the organisation
Able to translate complex risk‑management concepts into clear, accessible insights for colleagues, investors, and non‑executive Board members, and be recognised as a subject matter expert
Ability to build strong relationships and secure buy‑in across the business
Deep experience conducting risk assessments across strategic, operational, financial and compliance risks
Skilled in developing KRIs, assessing controls, and producing high‑quality management and Board reporting
A highly organised, structured, and proactive approach to managing a varied and demanding workload

Job Responsibility

Lead the Group’s risk management strategy, setting the framework that enables smart, proportionate, business‑friendly risk management
Partner with the Executive and senior leadership team to embed a strong, practical risk culture that supports growth and accountability
Own all risk reporting to the Board and Executive Committee, ensuring clarity, quality, and strategic insight
Facilitate the identification, assessment, and management of risks within our agreed appetite, ensuring mitigation where required
Lead on information security governance, ISO27001 compliance, data protection, business continuity, insurance, supplier compliance, and health & safety
Provide a strong second line monitoring and assurance function
Lead our legal and regulatory compliance programme, including Ofcom, TMBS and global communications regulations
Oversee incident reporting, breach investigations, root cause analysis, and regulator engagement
Develop, coach, and inspire the Risk & Compliance team leveraging in‑house specialists and external experts (including smart use of AI‑based tools)
Manage the Risk & Assurance Committee and Compliance Committee secretariat

What we offer

Competitive package including car allowance and discretionary bonus
Flexible working
Investment in your future career with a variety of learning and development opportunities
No dress code - embrace the freedom to bring your whole self to work
25 days annual leave, plus bank holidays. You'll even get your birthday off, too!
A pension plan for your future
Complimentary refreshments in all our offices

Fulltime

Global Equities MO In Business Risk and Control Head

Equities Middle Office: In-Business Risk & Control. Citi's Markets Operations gr...

Location

United States , Getzville; Tampa

Salary:

115840.00 - 173760.00 USD / Month

Citi

Expiration Date

Until further notice

Requirements

10+ years of experience in operations and risk management within the financial industry, with strong knowledge of the Markets business, particularly Equities Operations (Cash, Derivatives, Syndicates, Prime Finance, Stock Loan, Delta One, and/or OTC Confirmations)
Proven experience in building and maintaining risk and control governance frameworks, including attestation management, MCA oversight, and audit engagement
Strong understanding of operational risk management principles, including risk identification, assessment, monitoring, and mitigation
Experience with Key Risk Indicator (KRI) design, development, and monitoring, including threshold calibration and escalation frameworks
Experience with third-party and vendor risk management, including due diligence, ongoing monitoring, and performance oversight
Exceptional communication and stakeholder management skills — the ability to communicate complex risk topics clearly to a wide range of audiences, from desk-level operations through to senior management, and to build trusted relationships across multiple functions is critical for this role
Experience successfully collaborating with multiple stakeholders across the Markets business, and broader Citi Enterprise Risk Management and Operations, Technology teams
Demonstrated ability to manage multiple concurrent initiatives with competing priorities and deadlines, with the flexibility to take on new responsibilities as the risk landscape evolves
Proficiency with SharePoint, MS Office, Tableau/Power BI, and governance/risk management tools
Experience working with second-line (ORM, ECO, Compliance) and third-line (Internal Audit, external auditors) partners

Job Responsibility

Maintain and enhance the In-Business Risk & Control Governance framework and virtual IBRC Team across Equities Middle Office (Equities Cash, Equities Derivatives, Syndicates, Prime Finance, Stock Loan, Delta One, and OTC Confirmations), ensuring standardised governance over attestations, corporate hygiene, risk updates, commentary, audit engagement, working groups, and central initiatives
Partner with ECO and ORM Teams across Equities to ensure consistent risk oversight and control effectiveness
Design, develop, and maintain Key Risk Indicator (KRI) dashboards to proactively identify emerging risks, control weaknesses, and trends across Equities Middle Office operations, monitoring outputs and driving timely escalation where thresholds are breached
Oversee third-party and vendor risk governance for Equities Middle Office, ensuring appropriate due diligence, ongoing monitoring, performance oversight, and independent validation of vendor-generated outputs
Represent Equities Middle Office in senior working groups across Markets and Operations, contributing to governance forums and cross-functional risk committees
Coordinate end-to-end attestation processes across all Equities Middle Office desks, including sign-off tracking, timeliness monitoring, and completeness assurance
Manage access entitlement governance, records management, regulatory reporting oversight, and other control-related activities as required by the evolving risk landscape
Take ownership of risk and control initiatives as they arise, providing senior oversight and driving delivery across the Equities Middle Office landscape
Maintain and develop the Equities Middle Office Risk SharePoint hub, ensuring stakeholders have self-service access to current risk information, governance calendars, MI, and policy documentation
Build and maintain strong relationships with stakeholders across Equities Middle Office desks, Markets Operations COO, Technology, Compliance, Legal, and Front Office teams, establishing regular communication cadences and ensuring consistent messaging

What we offer

medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Fulltime

Head of Global Assurance

Scale seeks a Head of Global Assurance to lead a high-performing team of technic...

Location

United States , Washington

Salary:

287200.00 - 359000.00 USD / Year

Scale

Expiration Date

Until further notice

Requirements

10+ years of experience in cybersecurity compliance, GRC, public and commercial sector assurance, IT audit, cloud security, or related roles
Active U.S. security clearance, SCI eligible
Experience leading global or region-specific assurance programs through scalable control frameworks and cross-functional execution
Experience managing senior technical assurance, cybersecurity compliance, GRC, audit, or control evidence professionals
Experience managing distributed teams across time zones
Deep familiarity with FedRAMP, continuous monitoring, authorization packages, and related NIST frameworks
Experience leading customer assurance, control evidence, remediation, reporting, and audit workflows
Experience overseeing SOC 2, ISO 27001, and other commercial assurance frameworks
Experience with external assessors, authorizing officials, government customers, public sector partners, commercial auditors, or certification bodies
Experience working with legal teams on contract-driven assurance obligations, and strong judgment on when to escalate legal, contractual, technical, security, customer-facing, or privileged issues

Job Responsibility

Lead assurance programs across Scale’s Global Public Sector and Commercial businesses, including FedRAMP, NIST frameworks, SOC 2, ISO 27001, and other customer, regulatory, and business assurance requirements
Manage and develop a technical assurance team responsible for public sector authorizations, commercial assurance, audits, customer commitments, control evidence, remediation, and reporting
Set priorities and operating cadences for assurance workflows, including intake, evidence collection, control owner follow-up, remediation tracking, metrics, and deadline management
Build the metrics, dashboards, and reporting cadences that give company leadership a clear view of program health, key risks, and strategic priorities
Partner with Legal on contract-driven assurance obligations, sensitive escalations, external-facing responses, and customer-facing representation issues
Work closely with Global Public Sector, Enterprise, Security, Engineering, Product, and other control owners to validate evidence, track remediation, and support authorization and audit requirements
Collaborate across Legal and GRC on a unified controls framework for security and other regulatory requirements
Manage relationships with external auditors, assessors, and certification bodies

What we offer

Comprehensive health, dental and vision coverage
Retirement benefits
Learning and development stipend
Generous PTO
Commuter stipend

Fulltime

Head of IT Risk Officer for APAC-ME

The Information Technology Risk Office (ITRO), within Risk Management and Contro...

Location

Singapore , Singapour

Salary:

Not provided

Crédit Agricole

Expiration Date

Until further notice

Requirements

Bachelor’s or Master Degree in Computer Science, Information Technology or equivalent
Professional certification such as CISA, CISSP, CISM (preferred)
10+ years of experience in operational resilience, business continuity, or risk management within the financial sector
Proven leadership experience
Deep understanding of regulatory requirements in APAC-ME Region, with experience managing regulatory interactions
Strong executive presence with the ability to engage and influence C-suite leaders and board members
Proven ability to lead cross-functional teams and drive enterprise-wide resilience initiatives
Excellent verbal and written communication skills, with experience presenting to regulators, auditors, and senior stakeholders
Ability to thrive in a high-pressure environment, managing crises and business disruptions with a structured and strategic approach
Expected to work with stakeholders from different time zone (Asia, NY, London, Paris)

Job Responsibility

Contribute to Group and Regional ICT risk management by monitoring and reporting ICT risk levels across local and regional information systems and processes
Prepare ICT risk reporting for management and governance bodies
Provide a local vision for ICT risk deliverables, reflecting regional IT environments and operational realities
Support alignment of ICT risks with business strategy and risk appetite
Perform and coordinate annual ICT risk assessments and IT Risk Self‑Assessments (IT Radar)
Ensure full coverage of all nine ICT risk domains
Monitor emerging ICT risks related to technology evolution, operational changes, suppliers, or incidents
Identify early indications of material risks or potential risk appetite breaches
Perform regulatory watch on ICT‑related regulations and supervisory expectations (e.g. MAS TRM, HKMA)
Analyse regulatory requirements and identify gaps against existing ICT risk practices

Fulltime

Global Head of Operational Risk - Markets & Broker Dealers

The 2nd LoD Global Head of ORM- Markets & Broker-Dealers is responsible for lead...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Graduate-level education or equivalent experience
15+ years direct experience as an executive-level risk professional in a large, global financial services organization with responsibility for managing risks and related operational processes and markets
Commercial experience highly required, including front office business management, trade execution / management / supervision, product development, in-business risk and control, and operations/middle office management functions
Proven subject matter expertise in operational risk management including process and controls engineering
Strong working knowledge of operational risk management frameworks in a global organization
Demonstrated success in managing and advising on risk policy/strategy
Subject Matter Expert in financial instruments, risk metrics and control design/performance optimization strategies
Expert analytical, technical and quantitative skills including knowledge of control testing and assessment best practices
Expert knowledge of treasury, market risk, credit, liquidity management, secured financing, securitization, and derivative products
Proficient in MS Office applications (Excel/VBA, Word, PowerPoint) and SQL

Job Responsibility

Own and drive implementation and maintenance of the operational risk management framework including: policies, standards, technology and tools, monitoring and governance for Global Markets end-to-end inclusive of product control and business execution / Markets Operations
Review and agree with 1LOD the Appetite or Tolerance levels for Operational Risk categories together with the key indicators and thresholds for warning and breach
Ensure that Ops Risk for the Business (and country/business/LV, as applicable) is managed to defined Risk Appetite or Tolerance levels. In case risk levels are in potential and/or actual breach of defined thresholds, ensure risk exposure is well understood and there is a robust Path to Green to avert/remediate breach within an acceptable time frame
Review and confirm appropriateness and adequacy of first line risk identification, assessments (i.e. KMORs, MCA (RCSA), scenario analyses, third party reviews)
Where necessary, conduct independent second line operational risk assessments (e.g., reviewing control design and effectiveness of key processes, end-to-end deep dives of significant control breaks that impact multiple risk categories, lessons learned and near misses) and root cause assessments
Create aggregated risk profile for the Business using a combination of first line and independent second line assessments
Evaluate the quality and execution of the Business control design and effectiveness assessments and drive business efforts as needed to strengthen risk management, controls and other risk mitigation efforts
Escalate significant or unaddressed risk issues and control environment concerns to Business and Risk Leadership
Assess that the Business has the appropriate skills and experience and capacity for managing operational risks, and for implementing the operational risk framework
Lead 2nd line operational risk oversight of Product and New Activity risk management including NAC approval/voting membership, as well as regular monitoring of the Business portfolio of Products and Services

Fulltime

Select Country

Head of Risk and Regulatory Assurance

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?