Operational Risk & Control Sr Lead - Remote

As part of the Risk team, this role is responsible for independently planning, executing and documenting risk and control testing across Trans Union UK and Europe. The role applies specialist risk and control expertise to implement and maintain a programme to assess of control design and operating effectiveness. Outputs from the testing include identifying control weaknesses and non-adherence to policy or standards, and agreeing clear, evidence-based findings and proportionate remediation actions with the control and/or risk owner.

The role helps provide assurance over the effectiveness of the first line control environment and supports consistent, high-quality risk and control management across the business. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

• Lead risk-based control testing assignments across business processes and operational areas to assess whether controls are appropriately designed and operating effectively.
• Apply specialist judgement to determine appropriate testing scope, test plans, sampling methodology, evidence requirements and assessment criteria based on the nature, complexity and materiality of the relevant risks, controls, policies, standards and regulatory expectations.
• Execute and document control testing in a timely, consistent and evidence-led manner, maintaining accurate working papers, evidence trails and rationale to support testing conclusions.
• Provide subject-matter expertise on control design, operating effectiveness, and remediation expectations.
• Identify, document and validate control gaps, control failures, process weaknesses and instances of non-adherence to policy, standards or agreed procedures, exercising independent judgement when assessing risk impact and issue severity.
• Draft high-quality testing reports that clearly explain findings, risk impacts, root causes, ratings, evidence, agreed management actions and target completion dates.
• Engage constructively with control owners and relevant senior stakeholders to agree proportionate, evidence-based remediation actions that address root cause and reduce residual risk.
• Track and validate remediation activity, including reviewing evidence submitted by control owners to confirm actions have been completed effectively and escalating material concerns where required.
• Identify common themes, systemic control weaknesses and emerging risk indicators across testing activity, translating these into practical insight for management.
• Contribute to the ongoing development of control testing methodology, templates, quality standards, issue taxonomy and reporting processes.
• Support wider operational risk activities where required, including RCSA activity, risk register updates, thematic reviews, governance reporting and preparation for risk forums.
• Coach or support less experienced colleagues, where required, by sharing technical expertise, reviewing outputs or providing guidance on testing approach and evidence quality, without formal line-management accountability.

• Strong technical understanding of risk and control principles, including control design, operating effectiveness assessment, evidence standards, issue management and remediation validation.
• Practical experience planning and conducting control testing, assurance reviews, quality reviews, sampling exercises or thematic risk reviews.
• Ability to assess evidence objectively, challenge conclusions appropriately and produce well-supported testing outcomes.
• Strong written communication skills, with the ability to document findings clearly, concisely and in a way that supports effective management action and senior stakeholder understanding.
• Confident stakeholder management and influencing skills, including the ability to provide constructive challenge while maintaining effective working relationships.
• Excellent attention to detail and a high level of accuracy in all areas of work.
• Strong analytical and problem-solving skills, with the ability to identify themes, root causes, systemic control weaknesses and control improvement opportunities.
• Ability to translate detailed testing outcomes into clear management insight, themes, trends and practical recommendations.
• Well organised, able to manage competing priorities and…