MNK Group
Head of Group Risk & Internal Control
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Description
Role: Head of Group Risk & Internal Control
Duration: Full Time – 40 hours per week (09:00 to 18:00)
Department: Risk, Regulation and Governance & Controls
Reports to: Executive Managing Director, Risk, Regulation and Governance & Controls
Location: London – Onsite (4 days per week in the office; WFH on Tuesdays, Wednesdays, or Thursdays)
ROLE PURPOSE
MNK Group is seeking a senior, technically strong Head of Group Risk & Internal Control to lead the design, implementation, and embedding of a robust Group-wide Internal Control Framework (ICF) across its international (re)insurance business. This is a critical second-line leadership role with full accountability for ensuring that risks are identified, assessed, controlled, monitored, and reported in a consistent, effective, and proportionate manner. The role holder will act as the Group’s subject matter expert on operational risk and internal controls, with a strong focus on practical implementation, first-line ownership, and capability uplift. The role combines strategic oversight with hands-on technical delivery, requiring deep experience in internal control frameworks, control design, roll-out programmes, training delivery, and regulatory engagement.
KEY ACCOUNTABILITIES
Enterprise Risk Management Framework (ERMF)
- Own and continuously enhance the Group Enterprise Risk Management Framework, ensuring alignment with business strategy, regulatory expectations, and best practice.
- Lead the end-to-end Risk and Control Self-Assessment (RCSA) process, ensuring strong linkage between risks, controls, incidents, KRIs, and risk appetite.
- Provide effective second-line challenge to the first line, ensuring risks are appropriately identified, assessed, and mitigated.
- Oversee risk incident management, including root cause analysis, thematic reviews, and embedding lessons learned into control enhancements.
- Design and maintain the Group emerging risk framework, including horizon scanning, external research, and senior management reporting.
- Lead stress testing and scenario analysis to support strategic decision-making and risk appetite monitoring.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Internal Control Framework (ICF)
- Design, implement, and maintain a comprehensive Group Internal Control Framework aligned to regulatory expectations and industry standards (e.g. COSO or equivalent).
- Define and maintain control standards, control taxonomies, documentation requirements, and minimum control expectations.
- Lead the roll-out and embedding of the ICF across all business units, functions, and jurisdictions.
- Ensure controls are clearly articulated, risk-aligned, appropriately designed, and operationally effective.
- Establish and oversee control design and operating effectiveness testing methodologies.
- Drive remediation of control deficiencies, ensuring timely closure and sustainable improvements.
- Act as the Group technical authority on internal controls, advising senior stakeholders on control design and operational risk matters.
Governance, Risk & Compliance (GRC) Systems
- Own the configuration and ongoing enhancement of the Group GRC system.
- Ensure full integration of ERMF and ICF components within the GRC tool, including RCSAs, control testing, incidents, KRIs, and action tracking.
- Drive first-line and second-line adoption of the GRC system through training, guidance, and ongoing support.
- Ensure data quality, consistency, and integrity across all risk and control reporting.
Training, Awareness & Culture
- Design and deliver structured training programmes on internal controls, RCSA methodology, and operational risk management.
- Develop detailed guidance materials, playbooks, control design standards, and training content.
- Lead workshops and deep-dive sessions to support ICF roll-out, regulatory change, and control uplift initiatives.
- Embed a strong risk and control culture by building capability and accountability across the Group.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Governance, MI & Reporting
- Prepare high-quality MI and reporting for Boards, Committees, and Senior Management.
- Maintain the Group risk and control governance calendar and ensure effective tracking of actions.
- Support Board and Committee education on risk and internal control matters.
- Contribute to wider governance initiatives, including Operational Resilience and Business Continuity Planning.
Regulatory & External Engagement
- Monitor regulatory developments across relevant jurisdictions (PRA, FCA, and overseas regulators).
- Assess and communicate regulatory impacts to senior stakeholders.
- Support regulatory interactions, reviews, and audits relating to risk management and internal controls.
People & Leadership
- Act as a senior leader within the Risk, Regulation and Governance function.
- Mentor and develop junior risk team members.
- Build strong, trusted relationships with first-line and executive stakeholders.
- Promote collaboration and continuous improvement across the Group.
QUALIFICATIONS, SKILLS & EXPERIENCE
Essential:
- 10+ years’ experience in risk management and internal controls within regulated financial services or (re)insurance.
- Demonstrable hands-on experience designing, implementing, and embedding Internal Control Frameworks.
- Strong technical knowledge of operational risk and control best practice.
- Experience leading large-scale ICF roll-outs and training programmes.
- Excellent stakeholder management and influencing skills.
Desirable:
- Professional qualifications such as ACII, IRM, or equivalent.
- Experience engaging with regulators on risk and control matters.
- Hands-on experience with GRC systems.
PERSONAL ATTRIBUTES
- Highly organised, proactive, and delivery focused.
- Technically credible and confident acting as a subject matter expert.
- Strong attention to detail with strategic perspective.
- Commercially aware and pragmatic.
- Resilient and adaptable in a fast-paced environment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location