Senior Enterprise Risk and Resilience Manager

Working Pattern: Hybrid – 50/50

Morson Edge are representing an established UK financial services organisation focused on providing tailored banking and financial solutions to specialist markets.

The business has a strong focus on customer outcomes, long-term relationships and maintaining a high-performing culture built around integrity and excellence.

About the Role

The Enterprise Risk function operates as an independent Second Line of Defence, providing oversight and challenge across financial and non-financial risks.

The team covers areas including Operational Risk & Resilience, Treasury Risk, Climate & ESG, Risk Governance, Third Party Risk, Technology, IT, Cyber and emerging risks such as Artificial Intelligence.

This is a senior position within the Enterprise Risk team, with responsibility for strengthening risk frameworks, delivering assurance and providing clear insight to senior management and Board-level stakeholders.

Key Responsibilities

Operational Risk Oversight & Assurance

• Provide Second Line oversight and constructive challenge across First Line Operational Risk activities, including RCSAs, scenario analysis and control effectiveness assessments.
• Lead key control assurance, thematic reviews and risk deep-dives, identifying control gaps, weaknesses and systemic issues.
• Oversee operational risk events and incidents, ensuring robust root-cause analysis, remediation and lessons learned.
• Maintain and continuously enhance the Operational Risk Management Framework, policies and supporting guidance.
• Lead the delivery and implementation of a strategic GRC solution, from requirements gathering and vendor selection through to testing and embedding.

Operational Resilience & Non-Financial Risk

• Strengthen Second Line oversight of Operational Resilience, ensuring alignment with regulatory expectations and industry best practice.
• Provide oversight of Important Business Services, impact tolerances and scenario testing.
• Develop and maintain Operational Resilience and Third Party Risk Management frameworks.
• Provide Second Line oversight across Third Party, Cyber & Information Security, Technology & IT, and AI Risk.
• Provide independent challenge, ensuring non-financial risks are effectively governed and integrated into the wider Enterprise Risk Framework.

To be considered

• Significant Operational or Enterprise Risk experience within Financial Services or another highly regulated environment. Idelly within retail banking
• Strong Second Line of Defence experience, including independent oversight and challenge.
• Good knowledge of UK regulatory requirements relating to Operational Risk, particularly PRA and FCA expectations.
• Practical experience across Operational Resilience, including Important Business Services, impact tolerances and scenario testing.
• Exposure to TPRM, Cyber/IT Risk and emerging risks such as AI.
• Experience preparing and presenting risk information to Executive and Board-level committees.
• Strong ability to develop pragmatic and scalable risk solutions within evolving environments.
• Experience with GRC systems, risk tooling, analytics, dashboards and KRIs.
• A proactive approach to emerging areas of risk, including AI, data and digital resilience.