Governance, Risk & Compliance (GRC) Specialist (Data and AI)

Quilter Investors Limited; Southampton; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading investment firm in the United Kingdom is seeking an experienced individual to manage and mature their governance, risk, and compliance agenda. You will be a subject matter expert in GRC and provide guidance to stakeholders while ensuring alignment with regulatory requirements. Responsibilities include monitoring risk practices, supporting audits, and developing team capabilities. The ideal candidate will have a strong background in governance and risk management, along with excellent communication skills.

Benefits

Professional development opportunities

Flexible working arrangements

Qualifications

• Proven experience in governance, risk and compliance roles.
• Strong understanding of regulatory requirements and best practices.
• Excellent communication and stakeholder management skills.

Responsibilities

• Manage and mature GRC agenda within the function.
• Identify areas for risk mitigation and implement solutions.
• Develop and maintain the annual COO governance framework.

Skills

Governance

Risk Management

Compliance

Communication

Analytical skills

Education

Relevant degree or equivalent experience

Tools

Risk management frameworks like COBIT

Governance tools

Job description

You will be responsible for managing and maturing the governance, risk and compliance agenda within the function, coordinating the implementation and embedding of activity aligned with the Quilter enterprise and operational risk management frameworks, supporting leaders in making informed decisions that balance risk and reward while fostering a proactive risk management culture, aligned to the Group COO’s SMCR responsibilities.* As a subject matter expert, you’ll be the go-to person for GRC related activities and queries, supporting colleagues across the COO first line of defence, providing specialist advice, analysis and solutions to stakeholders across the function. You’ll need to keep up to date with industry best practice, regulatory and Quilter risk methodology changes, ensuring these are communicated across the function.* You will identify areas for risk mitigation and control enhancements. You’ll continuously review and improve processes and methodologies to align with regulatory requirements and industry best practice.* In addition, to delivery of activity within your specialism you will be required to support on the delivery and/or oversight of other framework activity (e.g. Supplier Due Diligence, Consumer Duty, Conflicts of Interest, Operational Resilience, Business Developed Applications, and SMCR).* You’ll monitor and co-ordinate delivery of assigned regulatory requests (questionnaires, consultation papers, queries) in collaboration with SMEs and 2nd line teams.* You’ll develop your expertise through active monitoring and research of trends and innovations, with respect to both GRC and across the domains and specialisms assigned within the role i.e. AI, Third-Party Management, Data; Cyber and Operations, contributing to the requirements, implementation and evolution of the 2LOD Risk Frameworks and Resolver system, supporting 2nd Line Risk and Internal Audit to evolve and improve GRC activity across the Quilter Group.* Lastly, you will help produce reporting and insight from the team activities and support other ad hoc responsibilities that form part of the COO agenda, delivering briefings and presentations to support leaders to make informed decisions that align to strategy and balance the trade-off between risk and reward, whilst embedding a proactive risk management culture.* Provide assurance over the deployment of the Enterprise and Operational Risk Management frameworks providing guidance to stakeholders to ensure effective implementation.* Facilitate effective oversight and management of assigned risk areas, incorporating best practices from relevant Industry frameworks e.g. ‘COBIT’ to support efficient and comprehensive processes.* Lead the risk identification, prioritisation and mitigation process, including appetite recommendations for Board approval. Support the articulation, documentation and escalation of key risks ensuring effective risk management/reduction plans are deployed, tracked and measured.* Provide expertise to support the definition and capture of key mitigating controls within the central risk management tool. Provide assurance with respect to control effectiveness, working closely with stakeholders to implement effective solutions.* Ensure risk events are reported, recorded, and escalated in line with Policy.* Monitor risk management practices and adherence to established standards and policies, ensuring data quality requirements are met, providing input for regular risk reporting, highlighting key risk trends for stakeholders.* Perform risk assessments and reviews, in collaboration with subject matter experts (SME’s) and co-ordinate activity to accept, track and report risks deemed to be outside of appetite.* Track and monitor risk exceptions to ensure control deviations and mitigating actions are identified and delivered, including development and maintenance of risk registers.* Lead and support the RCSA (Risk & Control Self-Assessment) process, challenging risk and control reviews, recommending appropriate remedial action for identified gaps and producing reports.* Partner with both internal and external auditors and the function SMEs to facilitate audit planning, review, escalation and remediation for the Group COO.* Where required, you will support good governance through agenda setting, maintaining the corporate calendar, preparation of papers, co-ordination of meetings, capturing management actions and decisions, drafting chair reports, and additional secretariat tasks for your assigned areas, in line with the COO Governance Framework.* Manage the annual refresh of artefacts, ensuring changes are formally captured, governed and communicated to stakeholders in line with the Group Policy Governance Framework.* Support completion of and ensure compliance with the Group defined Policy Attestation process, including oversight and governance of compliance action plans.* Support the development, implementation and maintenance of the COO governance framework. Work to ensure all COO committees and forums align with each other and corporate governance requirements and that COO governance activity supports SMCR Reasonable steps, and the right conversations are happening in the right places between the right people.* Co-ordinate governance processes related to the function, provide administrative support to various committees and forums, including scheduling meetings, preparing agendas, maintaining forward agendas, consolidating and distributing meeting materials, alongside any other agreed secretariat activities.* Accurately record minutes of meetings and ensure that all decisions and actions are documented and followed up on. Ensure COO-level decisions are effectively implemented across underlying forums.* Prepare Chair reports for the meetings for which you are the assigned secretary and review sub-fora chair reports for completeness and accuracy.* Maintain accurate and up-to-date records of all governance-related documents including tracking of all papers due for submission to ExCo and Board level fora.* Provide governance advisory services, supporting the effective implementation of Quilter Corporate Governance requirements, in line with the Group Governance Manual.* Supporting delivery of Board, Committee, and ad-hoc deep dive papers across the function, including the drafting of papers or alternatively the provision of support, advice and review to SMEs to support the drafting of papers.* Establish, agree and deliver the COO first line assurance plan.* Lead and develop a team of risk and control analysts to deliver the approved plan covering both routine and risk-based assurance.* Engage the business to review and test processes and controls, to provide independent assurance over the effectiveness of the control environment.* Actively support the identification of solutions and remediation activities, collaborating with SMEs to support continuous improvement and enhancement of the COO control environment.* Maintain thorough documentation of all findings, methodologies, and recommendations for future reference and assurance activity.* Compile comprehensive reports that detail the findings from assurance activities, ensuring clarity and accuracy, interpret results to provide meaningful insights and recommendation.* Communicate findings effectively to stakeholders, including senior leaders.* Track and report on the implementation of recommended actions and improvements to drive robust and timely closure.* Continuously review and improve processes and methodologies to align with regulatory requirements and industry best practice.* Maintain relationships with other assurance functions (Compliance Monitoring, and Internal Audit).* Co-ordinate the tracking and reporting of all management assurance actions (GIA, Compliance, other assurance etc) to drive robust and timely closure.* Provide assurance methodology and framework advisory services, keeping up to date with changes