WHSmith
Senior Risk & Internal Controls Manager - 18 Month FTC
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Enterprise Risk Management & Internal Controls Lead
PLEASE NOTE: As part of our organisational changes, our ongoing structure and roles continue to be reviewed. While this role is being advertised, circumstances may change and the role could be withdrawn/amended.
At WHSmith Europe our people are at the heart of everything we do. They are the ones that go the extra mile for our customers, the ones that enable our growth. This role is to lead the ongoing development, implementation and embedding of the Group's Enterprise Risk Management (ERM) and Internal Controls Framework. The role will coordinate the Group's ERM process, facilitate risk governance forums across European, North American and Australian operations, support compliance with Provision 29 of the UK Corporate Governance Code, and provide oversight of the Group's internal controls maturity and effectiveness.
What you will be doing:
Provision 29 & Internal Controls
- Lead the ongoing implementation and enhancement of the Group's approach to Provision 29 of the UK corporate governance code.
- Coordinate identification, documentation, and periodic assessments of the effectiveness of the Group's material controls (financial, operational, reporting and compliance).
- Develop a proportionate management control self-assessment and certification approach.
- Track and challenge management remediation plans arising from control weaknesses and assurance reviews.
- Coordinate internal control effectiveness reporting for Executive Management, Risk Committee, Audit Committee and Board.
- Maintain and continuously improve the Group Internal Controls Framework.
Enterprise Risk Management
- Maintain and continuously improve the Group-wide ERM methodology, guidance, tools and reporting standards across all divisions and functions.
- Coordinate the consistent identification, assessment monitoring and reporting of principal and emerging risks.
- Maintain the Group Principal Risk Register supporting the development and facilitating the ongoing review of risk appetite and tolerance measures.
- Challenge risk assessments and mitigating actions to ensure consistency, robustness and alignment with the ERM framework.
- Produce insightful risk reporting and analysis for senior leadership.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Risk Governance & Committees
- Plan, coordinate and facilitate Group Risk Committee meetings, the annual work programme, aligned global risk governance.
- Plan, coordinate or support divisional and functional risk committees as required.
- Plan agendas, dashboards, reports and supporting papers.
- Monitor progress against committee actions and decisions.
- Ensure effective escalation and reporting of significant risk and control matters through executive and board governance.
- Support the Director of Risk & Audit in preparing relevant reporting for the Audit Committee and Board.
Assurance Coordination & Continuous Improvement
- Drive consistent application of a three lines model, clarifying first line ownership, second-line oversight and third-line assurance responsibilities.
- Challenge the maturity and effectiveness of second-line risk and control activities and agree prioritised improvements.
- Support the development of assurance mapping and combined assurance reporting across key functions (e.g. audit, risk, internal controls, info sec, data protection, Health & safety).
- Support major transformation programmes by providing senior risk and controls expertise.
- For the ongoing finance transformation and ERP deployment, challenge future-state process and control design, working with Finance, Technology and programme leadership.
- Deliver training and awareness sessions to improve risk and controls capability across the business.
What we are looking for:
- Senior experience in enterprise risk management, internal controls, governance.
- Operating within a listed company.
- Facilitating senior governance forums.
- Engaging with executive stakeholders.
- Preparing concise and impactful Leadership and Committee reporting.
- Experience of finance transformation and ERP implementation.
- Professionally qualified (ACA, ACCA, CIA, CRMA, IRM or equivalent) or demonstrable equivalent experience.
- Strong analytical and problem-solving skills.
- Ability to challenge constructively and influence stakeholders.
- Excellent written and verbal communication skills.
- Strong facilitation and presentation skills.
- Ability to simplify complex issues for non-specialist audiences.
- High attention to detail whilst maintaining a strategic perspective.
- Pragmatic and commercially focused.
- Self-motivated and able to operate independently.
- Collaborative, Resilient and relationship oriented.
- Committed to continuous improvement.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
How we reward our teams:
- Hybrid Working Model from home and in the office.
- 4pm Friday Finish.
- Flexible Working.
- 24 Days holiday, plus your Birthday off, plus Bank Holidays with an opportunity to buy extra days holiday.
- Family Friendly Leave.
- Company Pension scheme.
- Annual Bonus based on company and personal performance.
- Competitive Salary.
- Cycle to work scheme.
- Staff Discount Card for railway stores (subject to policy).
About us:
Celebrating over 230 years, we’re proud to have grown into a globally recognised brand present in over 30 countries – the air of familiarity people love and trust on their journey. As a diverse group of over 6,000 colleagues, we’re all on the same journey to a better business through our commitments to our planet, people and the communities we serve.
Our business operates from two key locations, in a vibrant area of London, close to Aldgate and Liverpool Street Station, while the other is located at Swindon's International Business Park, just off the M4 with excellent transport links and over 100 on-site parking spaces.
For WHSmith Europe, our mission is simple – to create value for our stakeholders by providing a platform for global brands across airports, hospitals, rail stations and other markets. Our operational environment is fast-paced and highly regulated, requiring exceptional standards of maintenance, compliance, health & safety and colleague welfare across every location.
We’re all about creating an inclusive and welcoming workplace where everyone can be themselves and do their best. No matter your background, age, disability, gender, gender expression, gender identity, race or ethnicity, marital status, religion, sex, sexual orientation or anything else that makes you, you—you’re welcome here.
We’re also open to flexible working where possible, so if that’s something you need, let’s chat. And if you need any adjustments during the selection process, just let our Talent Acquisition team know—we’re happy to help!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location