Head of Enterprise Risk

**About Griffin**:
Finance is only relevant in context. People don't take out a loan in order to take out a loan; they take out a loan to refurbish a home, expand their business to a new location, or otherwise achieve a goal that happens to require a substantial amount of money.

Technology is increasingly enabling companies to embed finance at the point where it is most relevant and contextual. This is a trend that is well under way, and we're heading towards a future where people and firms get most of their financial services and products from technology companies and other non-bank firms, rather than high street banks.

The problem is that bringing a financial product to market is still incredibly hard.

Griffin exists to help make it easy for companies to offer financial products. We've just been authorised to become a bank, so that we can provide accounts, payments and loans to our customers.

**Culture**:
We are highly intentional about our culture, and look to define it both by who we are (core values) and by how we work (core behaviours). We won't hire people who aren't a good fit for our culture, even if they're otherwise qualified.

We're looking for thoughtful people who don't give up easily and who strive to be kind in their words and actions. As product designers, we are always looking for ways to simplify complex things and we take security very seriously. As a financial institution, we believe that our customers' trust is our single most valuable asset and we will go above and beyond to earn and keep it. We are transparent by default.

You can learn more about our culture and values on our website.

**The Risk and Compliance team**:
Like most of Griffin, the Risk and Compliance team is in its infancy.

We're working to build a second line that is a highly respected and integrated part of the business and somewhere our colleagues go to for expert and pragmatic advice, while remaining independent from the first line.

Our aim is no less than to be the best in class. We are not putting patches on legacy frameworks, we're laying the foundations of the future of global financial infrastructure.

**Who are you?**:
**Experience**:

- Strong knowledge of UK financial services regulatory framework, as well as industry best practice in the design and operation of systems and controls.
- 7+ years’ experience working within financial services in the UK or in a professional services firm, ideally within the EMI/PI, fintech and/or a challenger bank spaces.
- Experience in enterprise risk management and in operational risks, such as operational resilience, technology or outsourcing.
- Experience of presenting regulatory matters to senior colleagues, for example interactions with C-suite and leadership teams.
- Experience working for/being supervised by the UK’s financial services regulators - the FCA and/or the PRA.
- Capable of holistic oversight of systems and controls across a new bank, either in economic crime, compliance or risk. Able to get into regulatory detail and cross reference with policy and practices.

**Qualities**:

- A collaborative mindset and an interest in working closely with all other parts of the business, coaching those with limited knowledge of 3LoD models and building relationships to operate as an assurance business partner.
- We are a new bank so it is imperative that you are comfortable in going outside your comfort zone. This means that you may be asked to do other second line related activities as required by the CRO/CCO.

We’re hybrid-remote, and most of your colleagues will not share an office with you on a day-to-day basis. This means you should also have:

- Comfort with solo execution and managing people remotely - we're a small team so you'll need to be happy rolling up your sleeves and help more junior colleagues to succeed.
- A high degree of comfort adopting new software tools for document drafting, collaboration and communication.
- You love for writing - we have a lot of documents to draft and we place a high degree of importance on clarity and readability **(read more about **how we write** ).**

**What will you be doing here?**:
As Head of Enterprise Risk you will:

- Support the CRO with the oversight of the risk profile and the implementation/embedding of the risk management framework, proposing the changes required to ensure that it remains fit for purpose.
- Make sure that the horizon scanning process is effective and that emerging risks are identified and assessed, communicating these to the CRO and CCO and to the first line.
- Manage and oversee the work of other colleagues in the second line, acting as their reporting line as required.
- Oversee and, if required, deliver some of the second line assurance plan across all areas of the business, to ultimately conclude on whether the first line is adhering to policy and testing the design and effectiveness of the controls environment.
- Writing ToRs, risk management policies and standards, and other gover