Risk Manager

The Company

Timeline is a financial technology company on a mission to help millions of people plan, invest for, and enjoy retirement with confidence.

As a privately owned fast-growing fintech company providing Platform, MPS and financial planning solutions, we are well placed to disrupt the traditional financial services market. Our technology cuts out unnecessary costs, inefficiencies and anxiety for financial advisers, while improving the long-term investment returns for their clients.

We are a remote-first company with team members in over 13 countries. And given our diversity of thought, backgrounds and life experiences, we are constantly striving to celebrate individual uniqueness, while achieving our common mission. As a scaling, high-growth company, developing and adapting are the norm. If you’re after a dynamic company where you will make a real difference, then read on!

The Role

We are seeking an experienced Risk Manager to join our Risk and Compliance team on a permanent basis, with a focus on embedding the enterprise risk management framework, strengthening KRI coverage, enhancing resilience and third party risk oversight, with long-term ownership of the risk framework.

The role sits within the second line of defence and reports directly to the Chief Risk and Compliance Officer, and requires someone who can operate at pace without sacrificing rigour while building the enduring capabilities the business needs.

Role Responsibilities

Risk Framework

• Maintain the top-down and bottom-up risk assessments and registers, engaging with stakeholders across the business
• Support the maintenance and Board approval of risk appetite statements
• Review, enhance, calibrate and maintain KRIs across all business areas, ensuring thresholds are aligned to risk appetite
  

3rd Party and Operational Risk

• Implement 3rd party risk frameworks and oversight suitable for the scale and complexity of the business
• Support the quarterly risk assessment cycle across business units
• Maintain and enhance incident investigation processes, ensuring timely escalation, root cause analysis, closure of actions and reporting

Operational Resilience and Business Continuity

• Review and maintain the Business Continuity Plan and associated Disaster Recovery arrangements, ensuring they reflect Timeline’s operating model including the platform
• Support the annual operational resilience self-assessment, including mapping of important business services, setting impact tolerances and testing arrangements
• Coordinate scenario testing of BCP and DR arrangements, document outcomes, and track remediation actions
• Assess the operational resilience implications of new business initiatives and platform migrations, providing second-line input to project governance

Governance and Reporting

• Prepare risk-focused board and committee papers, including standing RCC reports
• Support the ICARA process, including scenario stress testing and wind-down planning, in coordination with Finance and the Chief of Risk and Compliance Officer
• Contribute to governance embedding, including supporting Terms of Reference development for risk-related committees
• Take ongoing ownership of the risk management framework

Stakeholder Engagement

• Collaborate with SLT and the first line to embed risk processes within the business
• Maintain clear documentation all aspects of the risk framework

Role Requirements

Core knowledge & experience:

• 6+ years’ experience in a risk management role within an FCA-regulated investment firm
• Demonstrable experience designing and embedding enterprise risk management frameworks, including risk registers, KRIs, risk appetite statements, resilience and third party risk
• Strong working knowledge of FCA rules including SYSC, PRIN, and prudential requirements (ICARA/MIFIDPRU)
• Hands-on experience of operational resilience frameworks, including important business services mapping, impact tolerance-setting, and BCP/DR maintenance and testing
• Familiarity with Consumer Duty, SM&CR, and third-party risk management
• Experience working across second-line functions with first-line business owners
• Excellent written communication skills, with the ability to prepare board-level documentation
• Proven ability to work independently and at pace in a fast-paced, evolving environment
  

Ideal knowledge & experience:

• Experience in a discretionary fund manager, MPS provider or investment platform business
• Familiarity with third-party oversight frameworks
• Experience using GRC platforms or data tools to support risk reporting
• Professional qualifications (e.g., IRM, CISI) desirable but not essential

The Package

• Competitive salary, dependent on experience
• Non-contributory pension scheme
• 28 days holiday plus bank holidays
• Non-contractual bonus scheme
• Potential to join company option scheme
• Insurance plans
• Cost of relevant professional qualifications and memberships
• Hybrid working
• Flexible hours (depending on team requirements)
• Wellbeing support