Controls Governance Manager

Job Title:

Controls Governance Manager

Location:

Flexible

Division:
Risk & Compliance:
Risk

Reports To:

Head of Controls Assurance

• Head of Controls Assurance
• Head of Enterprise Risk Management
• Risk & Governance Leadsin Business Areas
• Risk Owners/ Managing Risk Owners
• Compliance
• Head of Operational risk
• Head of Insurance risk
• Co-sourced Provider of “Controls Testing Services”

To strengthen first‑line accountability and provide independentsecond line assurance over key financial,operational,and regulatory controls, we have restructured our Controls and Compliance Assurance team. Reporting to the Head of Controls Assurance, the Controls Governance Manager will be responsible for defining andmaintainingthe controls testing methodology, overseeing governance and operational effectiveness, and ensuring high-quality reporting to senior stakeholders.

This role is central to establishing a robust, Solvency II‑aligned Internal Controls Framework for a large global. The successful candidate will act as the technical authority for controls testing, lead quality assurance activities, oversee performance of the outsourced testing services provider, and own the organisation’s master reporting suite (“single version of the truth”) for controls. Strong stakeholder engagement and deepexpertisein controls best practice are essential.

• Develop,maintain,and continuously enhance the controls testing methodology, including sampling strategies, walkthrough standards,and evidence requirements.
• Ensure themethodologyreflects best practice across the insurance sector and is updated in line with Solvency II (equivalent), PRA/FCA expectations, and emerging approaches such as automation anddata‑enabled testing.
• Provide authoritative guidance to the Controls and Compliance Assurance team andfirst‑linecontrolsowners on technical design and testing requirements.

• Support the Head of Controls Assurance in governing the Outsourced Provider of Controls Testing Services.
• Establish and operate mechanisms to monitor supplier performance, including:
• contract management and SLA tracking
• technical quality reviews
• issue trends analysis
• performance dashboards and KPI monitoring
• Lead quality assurance reviews of all outsourced testing output, ensuring consistency,robustness and compliance with internal standards.

• Lead the annual refresh of the Compliance Universe and the development of the thematic review and controls testing plans, applying a risk-based methodology to prioritise assurance activity.
• Coordinate with other assurance functions and business stakeholders to ensure the plans reflect key and emerging risks, regulatory priorities, business needs, and areas of potential assurance overlap or reliance.
• Present the proposed plans, together with the supporting risk assessment and rationale, to the relevant senior stakeholders and governance committees for review and approval.
• Maintain oversight of the approved plans throughout the year and quarterly recommend changes where developments in the organisation’s risk profile or business priorities require assurance coverage to be adjusted.

• Own and manage the organisation’s “single version of the truth” for controls reporting, integrating data from:
• the GRC system
• internal oversight activities
• outsourced testing results
• Produce high‑quality,timely reporting for senior management, including materials forExCo, Audit Committee, and Risk & Regulatory Committee.
• Ensure reporting clearly articulates control weaknesses, themes, remediation progress, and emerging risk insights.