Risk & Assurance Business Partner

At Smart, our mission is to transform retirement, savings and financial wellbeing, across all generations, around the world.

**THE ROLE**

Key responsibilities:
Risk & Assurance

- Manage the Risk & Assurance budget, including planning, forecasting, and monitoring to ensure efficient resource allocation and alignment with priorities

- Serve as Secretary to the Group Risk and Governance Committee (GRCC), ensuring timely preparation and distribution of papers, accurate minutes, and prompt action follow-up

- Prepare clear, concise, and well-structured papers and presentations for the Audit & Risk Committee and Board, translating complex technical and compliance information into actionable insights and recommendations

- Support Smart’s incident response activities and processes, including simulations and reviews, collaborating across Risk, IT, and Engineering and Cyber Security teams

Insurance

- Oversee the administration and strategic management of corporate insurance programmes, ensuring alignment with Smart’s evolving risk profile

- Lead the annual insurance renewal process, including risk assessment, data analysis, and negotiation to secure optimal coverage and pricing

- Serve as the primary liaison with insurance brokers and carriers, fostering partnerships that support the organisation’s risk mitigation objectives

- Continuously evaluate operational exposures and recommend insurance solutions for comprehensive and cost-effective coverage across business units

Information Security Audits

- Oversee and coordinate ISO 27001 and SOC 2 audit activities, ensuring evidence collection, control implementation, and compliance alignment across all business units

- Manage and maintain continuous compliance through Vanta, automating evidence gathering, monitoring control effectiveness, and tracking remediation efforts

- Collaborate with internal stakeholders and external auditors to ensure audit readiness, accurate documentation, and timely completion of all compliance requirements

Client management

- Provide ongoing due diligence and transparent communication to Smart’s partners and clients, ensuring a clear understanding of risk, security, and audit activities

**WHO WE ARE LOOKING FOR**

**Experience**:

- Proven experience in a risk, assurance or compliance role, ideally within a corporate or regulated environment.

- Experience managing or supporting corporate insurance programmes, including renewals, risk assessment, and broker liaison.

- Hands-on experience with information security audits, such as ISO 27001 and SOC 2, and working with audit management tools like Vanta or similar.

- Exposure to incident response management, including cross-functional collaboration with IT, Engineering, and Cyber Security teams.

- Experience preparing papers, reports, and presentations for executive committees, boards, or governance forums.

**Skills & Competencies**:

- Strong understanding of risk management frameworks, compliance obligations, and governance processes.

- Excellent analytical and problem-solving skills, with the ability to translate complex technical and compliance information into actionable insights.

- Effective communication and stakeholder management skills, able to interact with executives, internal teams, and external partners/clients.

- Organisational and project management skills, including budgeting, forecasting, and monitoring of resources.

- Strong attention to detail, especially in documentation, reporting, and audit compliance.

- Ability to work independently and take ownership of tasks while collaborating effectively across teams.

**Personal Attributes**:

- High level of integrity and professionalism.

- Proactive, strategic thinker with the ability to anticipate risks and recommend solutions.

- Comfortable working in a fast-paced, evolving environment with multiple priorities.

- Commitment to continuous improvement and maintaining up-to-date knowledge of industry standards and best practices.

**WHO WE ARE**

We work in partnerships with governments and financial institutions in the UK and internationally. Our cloud-native digital platform is revolutionising how people around the world think about, and save for, their retirement.

At heart, we’re a financial technology business. What we do is all about innovation, and using the power of digital change to put the customer first. Our Engineers will tell you that working at Smart gives you the opportunity to play your part in developing world-class technological solutions, working with - and learning from - like-minded people.

You’ll also find that, across our business, our colleagues love Smart’s culture, and how what we do means better financial outcomes for savers. That feels worthwhile, and it means that what we do, collectively, goes way beyond the nine to five of a typical working day.

Don’t just take our word for it - you can see what our colleagues say about working at Smart on LinkedIn Life and Glassdoor.

**BEN