Process, Risk and Control Mapping

• Support mapping of controls to business processes, process risks, operational risks and relevant control objectives.
• Assist with the development and maintenance of process, risk and control inventories, ensuring clear linkage between risk drivers, controls and outcomes.
• Help ensure controls are aligned to the agreed FTSE Russell risk and process architecture and are positioned at the right point in the process.
• Support integration of control data into RCSA, incident review, issue management, audit response and root cause analysis activities.
• Identify opportunities to improve risk and control coverage, including areas of duplication, control weakness, under-control or unclear ownership.
• Work with business and functional stakeholders to clarify process steps, risk points, control activities and evidence requirements.
• Support the development of a more coherent control lifecycle by linking controls to risks, processes, issues, incidents, assurance outcomes and remediation activity.

RCSA Coordination and Quality Review

• Coordinate periodic RCSA activities across business functions, supporting planning, preparation, execution, review and follow-up.
• Facilitate risk and control assessment workshops, helping stakeholders identify key risks, assess control effectiveness and agree appropriate actions.
• Review RCSA submissions for quality, completeness, consistency and evidence-based rationale.
• Constructively challenge risk ratings, control effectiveness assessments, action plans and supporting commentary where information is unclear, inconsistent or unsupported.
• Monitor completion of RCSA actions and remediation plans, tracking ownership, due dates, dependencies and delivery status.
• Support the translation of RCSA outcomes into issue creation, control uplift, process improvement or targeted remediation where required.
• Help ensure RCSA outputs are aligned to underlying incidents, issues, control performance, audit findings and operational risk themes.
• Support continuous improvement of the RCSA methodology, cadence, templates, guidance and data quality standards.

Reporting, Analytics and Management Information

• Produce and support controls and RCSA management information for governance forums, working groups, senior management updates and committee reporting.
• Analyse trends relating to control effectiveness, assessment outcomes, incidents, issues, audit findings, remediation activity and control inventory quality.
• Support preparation of governance committee and executive reporting, ensuring outputs are accurate, clear, evidence-based and action-oriented.
• Monitor key performance indicators relating to control framework maturity, control documentation quality, assessment completion, overdue actions and remediation delivery.
• Identify emerging themes, systemic control weaknesses or recurring risk drivers and recommend improvement actions.
• Help develop more insight-led reporting that explains what the data means, why it matters and where management attention is required.
• Ensure reporting outputs are reconciled, timely and suitable for review by senior stakeholders, second line, Internal Audit or regulators.
• Support ongoing improvement of reporting definitions, data sources, dashboards and management information processes.

Stakeholder Engagement and Advisory Support

• Build effective working relationships across Product, Operations, Engineering, Corporate Functions, Risk, Compliance, Internal Audit and other relevant stakeholders.
• Provide guidance and support to control owners, process owners and risk coordinators on controls framework requirements and RCSA expectations.
• Facilitate workshops, working groups and challenge sessions to support control uplift, process-risk-control mapping and assessment activities.
• Communicate complex risk and control concepts clearly to both specialist and non-specialist audiences.
• Support internal and external reviews, audits, assurance activity and regulatory enquiries by helping to provide clear, accurate and well-organised control information.
• Escalate material control gaps, poor-quality documentation, delayed remediation or unclear ownership in a timely and structured way.
• Act as a reliable point of coordination and subject matter support for controls and RCSA activity within the first line.

Continuous Improvement and Risk Culture

• Identify opportunities to improve the effectiveness, efficiency and consistency of the Controls Framework and RCSA programme.
• Support enhancements within MetricStream and related systems, including improvements to workflow, data quality, reporting and user experience.
• Promote adoption of controls best practice, governance standards and evidence-based assessment across FTSE Russell.
• Contribute to the ongoing maturity of the Controls Framework by helping move from inventory maintenance to a more risk-aligned, insight-driven and assurance-ready control environment.
• Support improvements in control taxonomy, classification, evidence standards, attestation processes and lifecycle management.
• Help embed a strong controls culture through constructive challenge, transparency, clear ownership and disciplined follow-through.
• Promote better linkage between controls, RCSA, incidents, issues, audit findings, root cause analysis and risk appetite monitoring.

Knowledge, Skills & Experience

Essential

• Experience in operational risk, controls, audit, governance, compliance, assurance or a comparable regulated environment.
• Good understanding of risk and control frameworks, including control design, ownership, evidence, testing, effectiveness assessment and lifecycle management.
• Experience conducting control reviews, control assessments, risk assessments, assurance activity or quality assurance reviews.
• Strong analytical and problem-solving skills, with the ability to interpret complex information and identify key themes, gaps and improvement opportunities.
• Ability to assess control documentation and challenge whether controls are clearly defined, measurable, owned and aligned to risks.
• Experience supporting or facilitating workshops, working groups or stakeholder review sessions.
• Strong stakeholder management and communication skills, including the ability to influence constructively and explain control concepts clearly.
• Experience producing management information, dashboards, governance reporting or committee materials.
• Strong organisational skills, with the ability to manage multiple activities, deadlines and stakeholder follow-ups.
• Excellent attention to detail and a strong focus on data quality, evidence standards and documentation discipline.
• Ability to work independently, escalate appropriately and maintain delivery discipline in a complex environment.

Desirable

• Experience with RCSA methodologies, including risk identification, control assessment, residual risk assessment and remediation planning.
• Experience using MetricStream or equivalent GRC platforms.
• Understanding of process mapping, risk taxonomy, control design and controls rationalisation.
• Experience within regulated financial services, market infrastructure, benchmark administration, index, data or analytics environments.
• Familiarity with issue management, incident management, audit findings, root cause analysis and remediation tracking.
• Experience supporting regulatory reviews, Internal Audit activity, second-line challenge or control remediation programmes.
• Professional qualification, or progress toward a qualification, in risk management, audit, governance, compliance or a related discipline.

Why Join FTSE Russell?

FTSE Russell operates in a highly regulated, client-critical environment where strong controls, reliable risk assessment and evidence-based governance are essential.