Head of Business Risk and Control

Location: St James's

hackajob is partnering directly with Moneybox to hire for this role. About Moneybox At Moneybox, our mission is to give everyone the means to get more out of life. We're guided by our belief that wealth isn't about the money, it's about the means to more - more freedom, opportunities, possibilities, and peace of mind. Moneybox is an award-winning wealth management platform, helping over one and a half million people build wealth throughout their lives, whether they're saving and investing, buying their first home, or planning for retirement.

Job Brief The Head of Business Risk & Control leads MBSCL's consolidated first-line risk and control function: the business-side ownership of advice controls, operational controls, and the oversight of DML-delivered services and third-party vendors. Two Managers report in (Advice Risk & Control and Operations Risk & Control) and the role is the senior first-line counterpart to the Senior Compliance Manager - Advice, whose independent second-line function tests and challenges everything this role produces.

The role reports to the Managing Director for how well the service is running - operational performance, customer outcomes, control effectiveness - and to the Executive Director for the arrangements themselves - the Intra Company Agreement (ICA), third-party contracts, resilience and the open SYSC 8 items. Where an issue is about how the service is performing, it escalates to the MD;

where it is about the arrangement itself, it escalates to the Executive Director. Where an issue implicates advice suitability, the Director of Advice retains suitability accountability and consumes your MI and findings on that dimension. What you'll be doing Leading the function Function design - own the design and operation of MBSCL's first-line risk and control framework across both domains, ensuring it is proportionate, testable and evidenced.

Line management - manage and develop the Advice Risk & Control Manager and Operations Risk & Control Manager; set the standards for what good first-line control and oversight look like across the two domains and hold both to them. Integrated MI - bring the advice and operations risk pictures together into a single view of business risk and control health for the Managing Director, the Executive Director, the Advice Oversight Committee and the Board.

Advice controls Control ownership - own the first-line control environment for the advice service delivered by the Advice Risk & Control Manager: the file-review and QA programme (100% at launch, transitioning to risk-based sampling), input/output validation, engine score monitoring, stress testing, and the operational running of the T&C scheme owned by the Director of Advice. Engine assurance - own the evidence that the rules-based Advice Engine is producing suitable output within the House Rules Interface with the Director of Advice - supply the suitability MI and QA findings the Director of Advice needs to discharge their suitability accountability;

consult on House Rules changes; support T&C evidence. Operational & outsourcing oversight Intra-group agreement oversight - own the day-to-day oversight of the ICA with DML - service definitions, service levels, performance MI, remediation and escalation - so that MBSCL can demonstrate effective, continuing oversight of its outsourced critical functions. Outsourcing oversight - maintain the outsourcing oversight records that support the Executive Director's accountability and MBSCL's obligations, working through any open items with Legal and Compliance.

Third-party vendors - own the first-line relationship with material third-party providers with contract and service-level management, performance and capacity monitoring against agreed thresholds, service reviews, due-diligence refresh, escalation. The Director of Advice sets the requirements for advice generation and suitability; DML owns technical integration; you own the arrangement. Operations oversight - oversee, via the Operations Risk & Control Manager, DML's delivery of customer support, AML/KYC processing and complaints handling which ladder into service level, quality, and the Consumer Duty support outcome.

Resilience and continuity - coordinate with DML on operational resilience and business continuity arrangements for the services MBSCL depends on, including participation in continuity testing. What we're looking for Essential Substantial risk and control leadership experience in a regulated retail investment, advice or platform business with hands-on ownership of first-line controls. Strong working knowledge of COBS 9A suitability requirements, Consumer Duty (PRIN 2A) and the three-lines-of-defence model in practice.

People leadership experience - managing senior specialist managers and building a small team; setting standards and holding both domains to them. The judgement and standing to operate a dual accountability cleanly, escalate uncomfortable findings, and challenge senior…