Chief Risk Manager

Chief Risk Manager

1. Role

1.1 Chief Risk Manager

The role reports to the Chief Executive Office and oversees risk, compliance and audit functions across the Bristow and Sutor Group. The role’s primary focus is oversight of the regulatory business in Credit Style Limited and will be the SMF16 and SMF17 for this business. In addition, the role’s main objectives are to ensure compliance and risk oversight by:

• ensuring effective and appropriate second and third line support for the business as a whole to ensure regulatory compliance;

• delivering effective governance and facilitation of risk management across the organisation and relevant third parties;

• reducing risk by providing transparency and guidance to the relevant businesses; and

• providing data, KRIs and analysis that allows for the effective running of the businesses.

2. Responsibilities

The role’s key responsibilities are:

1. Regulatory Compliance: Ensuring adherence to external laws and regulations including advising the business as to upcoming changes and new requirements. The core focus of this responsibility relates to Credit Style Limited. This will include being an SMF16 and SMF17 and responsibility for data protection matters.

2. Policy, Standards, and Control Frameworks: Defining how the organisation operates safely and compliantly within the company’s governance framework and risk appetite. This includes responsibility for maintenance of the group governance framework.

3. Risk Management: Facilitating the identification, assessment, and management risks across the organisation including those relating to third parties. This includes ownership of the Risk Committee and governance registers.

4. Monitoring, Testing, and Assurance: Checking that controls are working as intended and ensuring relevant and appropriate measures are in place to ensure policies and procedures are adhered to.

5. Training and Risk Culture: Delivering and embedded the correct risk adverse behaviour across the organisation.

6. Governance and Reporting: Providing oversight and transparency within the framework of the group’s risk governance framework.

7. Incident and Issue Management: Investigating failures, managing incidents if required and ensuring effective IRs are delivered to understand root cause analysis and mitigations.

8. Advisory and Guidance: Providing recommendations to the business as required.

9. Third-Party and Supplier Risk: Ensuring risks are managed outside the organisation including reviewing third party contracts and risk.

10. Health and Safety.