Risk Advisory Business Partner-Operational Risk

Role Overview

A Risk Advisory Business Partner works closely with the business units to identify, assess, and mitigate operational and financial risks. They integrate risk management into strategic and change management initiatives, ensuring alignment with business objectives. Additionally, they provide expert advice and support in mitigating and managing risk exposure in a commercial way, deliver meaningful analysis and reporting to both the business and senior management, ensure compliance with the risk framework and business continuity management requirements, and conduct training to enhance risk awareness and competency across the organization.

• Risk Identification and Assessment: Collaborate with the business to identify and assess its material risks from business as usual activity, emerging risks, strategic and change initiatives, etc., ensuring they are understood as part of commercial and decision making activity. Support the business as it undertakes risk assessment activity (e.g. Risk and Control Self-Assessment, Top Down Risk Assessment, Scenario Analysis, Root Cause Analysis, etc.)
  
  and leverage expertise to challenge the business’s logic/assumptions to ensure the assessments are thorough and complete.
• Risk Appetite: Work proactively with the business to define the Group’s risk appetite (including risk appetite thresholds and key risk indicator (KRI) metrics/thresholds), ensuring it is appropriate in relation to the business’s activity and risk profile. Review the business risk profile against risk appetite and work with the business to identify appropriate actions to address risks that fall outside appetite.
• Strategic Risk & Change Management: Partner with the business to identify, assess, and manage risks that could potentially hinder the achievement of its long-term strategic objectives. Help the business identify and assess risks regarding strategic initiatives (e.g. M&A, new product development, new business ventures, etc.) and the potential impact on the business’s risk profile, including financial, operational, regulatory and cultural risks.
  
  Review new business requests (as part of the Change Management Process) to ensure a complete and accurate understanding of the initiative and its risk profile, and that appropriate actions are taken to mitigate/manage any risks arising from new business activity.
• Risk Mitigation and Management: Work with the business to ensure its end-to-end risk profile is managed actively and appropriately and in a commercial manner. Partner with the business to evaluate the adequacy of its control and policy framework in mitigating the risks that are inherent to its risk profile and leverage expertise to challenge the business’s logic/assumptions to ensure controls are adequate and effective.
  
  Support and challenge the business in identifying deficiencies in its control and policy framework, provide an appropriate level of constructive challenge, and undertake targeted risk reviews on hot topics/areas of interest across the Group.
• Risk Monitoring and Reporting: Support the business in monitoring its end-to-end risk profile, ensuring appropriate MI, analysis and commentary are produced regarding risk appetite metrics, significant internal and external risk events, the status of the Group’s response to remediate issues, risk‑related data, and the Risk team’s assurance activity. Provide monthly updates on risk‑related MI, analysis, emerging threats, etc. for Risk Leadership Team meetings and draft commentary for risk committees as required.
• Events, Issues, Risk Acceptances and Policy Breaches: Support the business in immediate actions to mitigate or contain significant events and ensure those events are escalated to the appropriate level of management, manage day‑to‑day risk matters in accordance with risk framework requirements, provide quality assurance over Events, Issues and Policy Breaches, and support deep dives into significant internal and external events.
• Business Continuity Planning and Crisis Management: Provide independent oversight over business continuity plans, support business in developing remediation plans if…