Enterprise Risk Manager

Location: Edinburgh (Hybrid) | Practice Area: Corporate Services | Department: Enterprise Risk | Type: Permanent

As Manager, Enterprise Risk, you will play a key role in strengthening and advancing Capco’s global Enterprise Risk Management (ERM) framework.

You will lead core elements of the framework, including Risk and Control Self-Assessments (RCSAs), third-party risk, policy management, mandatory compliance training and governance. Working globally and cross-functionally across teams, you will help embed effective risk management into business strategy and operational processes.

As Capco continues to scale across geographies and services, including increasingly complex client engagements and the use of AI, you will help ensure risk oversight operates at a strategic, integrated and enterprise-wide level.

• →Lead enterprise-wide and regional RCSAs, ensuring risks are clearly articulated and consistently rated, controls are appropriately assessed, and mitigating actions are tracked through to completion.
• →Support the continued evolution and global implementation of Capco’s ERM framework, including scenario planning and emerging risk analysis across areas such as geopolitical, regulatory, cyber, AI-related and supply-chain risk.
• →Design and implement a control-testing framework for high-risk processes, including Anti-Bribery and Corruption (ABAC), and support other Internal Audits across the Enterprise Risk function.
• →Own key compliance and governance activities, including the annual policy review, Policy Committee, conflicts of interest and gift registries, and mandatory compliance training.
• →Work with Procurement and business owners to strengthen third-party risk management, including due diligence, ongoing assurance, remediation, supplier oversight and reporting to senior leadership.

• 5–10 years’ experience across risk management, compliance, governance and/or audit.
• Demonstrated experience managing complex projects and delivering effectively across multiple stakeholders and business functions.
• Strong communication skills, with the ability to articulate complex risk concepts clearly and effectively.
• Ability to collaborate successfully with stakeholders at different levels across regions and functions.
• Strategic and commercial acumen gained within a professional services organisation or comparable environment.

• A professional risk qualification, such as an Institute of Risk Management certificate or diploma.
• Experience using OneTrust or another Governance, Risk and Compliance (GRC) platform.

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Applications will be open until the 28th of September. CV reviews will take place on the 28th and 29th of September with successful candidates being contacted for initial screening calls that week. The following week business interviews will take place with a likelihood of two stages.