Head of Internal Control & Resilience – Group Operations

About the role

The Head of Internal Control & Resilience leads the governance, risk and compliance (GRC) framework for Group Operations, acting as a 1.5 Line of Defense between front‑line business units and risk, compliance, finance and audit functions. The role ensures robust control design, effective execution and continuous improvement across the operational risk landscape.

Key responsibilities

• Own and operationalise the Operations Group Risk Management Forum (OGRM) and feed insights into enterprise risk committees.
• Drive control transformation initiatives, including Identity & Access Management (IAM) and Role‑Based Access Control (RBAC) integration.
• Strengthen governance of Operational Risk Events (ORE) in partnership with Technology GRC and Risk teams.
• Oversee Enterprise Reconciliation Framework (ERF) assurance, leading the Quality Assurance & Proofing Unit.
• Represent Operations in resilience and risk forums, aligning risk insights with BCP/BIA and incident management.
• Provide independent assurance, track audit actions and conduct thematic control assessments.

Required profile

• Extensive experience in internal control, risk management or GRC within a large, regulated organization.
• Proven ability to lead cross‑functional initiatives and influence senior stakeholders.
• Strong analytical mindset with a focus on systemic risk mitigation.
• Excellent communication skills to translate risk concepts into actionable business decisions.

Required skills

• Identity & Access Management (IAM)
• Role‑Based Access Control (RBAC)
• Enterprise Reconciliation Framework (ERF)