Risk Manager - Advice

Implement the Moneybox group's risk management framework for MBSCL, adapting the risk taxonomy, policies, governance and tooling to an advice business, to give MBSCL a proportionate, embedded framework in place for go-live.

Develop and maintain MBSCL's risk appetite statements, tolerances and KRIs with the executive and Board, and monitor performance against them, to set clear boundaries for the business and give early warning of problems.

Support the business to run risk and control self-assessments (RCSAs), documenting risks, controls and actions, and provide independent challenge of the results, to ensure controls are adequate and operating effectively.

Work hands-on with the business to describe, design and embed the controls needed for go-live, including around the advice journey and the AI advice engine, keeping ownership with the first line, to ensure the service launches with an appropriate control environment.

Lead production of MBSCL's capital and liquidity adequacy assessment and wind-down plan, including scenario and stress testing, working with Finance and the executive, to ensure MBSCL is financially resilient and could wind down in an orderly way.

Provide independent oversight of MBSCL's risk profile across conduct, operational, financial, model and AI, data and third-party risks, and produce clear risk MI for the Board, Advice Oversight Committee and executive, to give decision-makers a clear view of risk.

Establish and run the risk event, incident and breach process, including root-cause analysis and tracking of remediation to closure, to ensure issues are captured, learned from and closed out.

Design and deliver a second line control testing and assurance plan for key controls, to evidence that controls operate effectively as MBSCL scales.

Oversee MBSCL's operational resilience and business continuity, including important business services, impact tolerances, mapping and scenario testing, to ensure MBSCL can remain within its impact tolerances.

Assess and challenge the risks arising from MBSCL's dependency on DML and other third parties, including supplier risk assessments, service level performance and exit and contingency planning, to evidence that MBSCL independently manages group supplier risk.

Provide second line risk opinions on new propositions, advice engine and House Rules changes and significant initiatives, to ensure risks are understood and within appetite before launch.

Support the Head of Risk and Compliance with Board, committee and FCA engagement on risk matters, and build risk awareness through training and business partnering, to embed a strong risk culture.

You're a builder who enjoys creating frameworks from scratch and making them work in practice, and you're comfortable with change and ambiguity in a small team.

You're pragmatic and hands-on: you'll roll up your sleeves with the business on controls, and you know where to draw the line between supporting and owning.

You have sound independent judgement and the confidence to challenge senior stakeholders, including at a group supplier, constructively and with evidence.

You're numerate and structured, comfortable with capital, liquidity and scenario analysis, and able to turn complex risk into clear, decision-ready MI.

You're curious about technology and AI, and keen to understand the risks of automated advice and platform dependencies.

You work well in a matrix, partnering closely with a small executive team and a wider group, and you want to grow as the function scales.

Substantial experience in a second line risk role within an FCA-regulated investment, wealth, platform or fintech firm.

Hands-on experience implementing or running a risk management framework, including risk taxonomy, risk appetite, KRIs, RCSAs, risk event management and risk reporting.

Working knowledge of the FCA prudential regime for exempt CAD firms, including the wind down process, own funds and liquid assets requirements.

Working knowledge of operational resilience (SYSC 15A) and of outsourcing and third-party risk (SYSC 8).

Understanding of the FCA conduct framework (Consumer Duty, COBS, SM&CR) sufficient to assess conduct risk in an advice context.

Experience supporting a new regulated service launch, an FCA authorisation or a similar build environment is highly desirable.

Technology, platform or model risk experience, including automated or AI-driven decisioning, is beneficial but not essential.

Experience of group structures, including relying on or overseeing a group supplier, is advantageous.

Ability to produce clear risk MI and papers that stand up to Board and regulator scrutiny.

A recognised risk qualification (for example an IRM Certificate or Diploma in Enterprise Risk Management) is desirable.

Opportunity to join a fast-growing, award-winning and super ambitious startup.

Work with a friendly team of highly motivated individuals.

Be in an environment where you are listened to and can actually have an impact.

Thriving collaborative and inclusive company culture.

Company pension scheme.

Company bonus scheme.

Hybrid working environment.

Home office furniture allowance.

Personal Annual Learning and Development budget.

Private Medical Insurance.

Health Cash Plan - cashback on everyday healthcare like dental and opticians.

Cycle to work scheme - spread the cost of a new bike and accessories.

CycleSaver - save on bike-share subscriptions and have a more sustainable commute.

Wellhub subscription to a variety of gyms and wellbeing apps.

Enhanced parental pay & leave.

25 days holiday + bank holidays with additional days added with length of service.