CFC

Cyber risk underwriting through MGA platform

Risk and Controls Manager

Internal Audit & ControlsUpdated on Nov 13

Full-timeLondon, UKNo salary listedHybrid

About the Job

Requirements

Strong experience in operational risk, controls, assurance, or a comparable risk management role within a complex organisation.
Practical experience designing, implementing, or embedding Risk and Control Self-Assessments (RCSAs) and translating risk and control frameworks into business-owned processes.
Proven ability to manage remediation plans, challenge action owners, and drive delivery against agreed timelines.
Strong business-partnering skills, with the confidence to advise, coach, and constructively challenge stakeholders at different levels.
Clear written and verbal communication skills, including the ability to produce concise management information and governance reporting.
Sound understanding of risk and control principles, including inherent and residual risk, control design, operating effectiveness, and risk treatment.
Ability to apply proportionate governance and assurance practices in a regulated environment.
Experience defining control evidence requirements and practical control testing approaches.
Strong analytical and organisational skills, with the ability to manage multiple actions, dependencies, and stakeholders.
Experience using a governance, risk, and compliance platform.

Responsibilities

Lead the development and rollout of Risk and Control Self-Assessments (RCSAs) across all in-scope business functions, translating Risk and Control Matrices into practical, business-owned assessments.
Support risk owners to assess inherent and residual risk, evaluate control effectiveness, and define proportionate risk treatment plans.
Track and coordinate remediation arising from control gaps and RCSA outcomes, challenging action owners, maintaining momentum, and escalating overdue or high-risk actions through the appropriate governance forums.
Act as the primary point of contact for business stakeholders throughout implementation, providing hands-on support and coaching the First Line on risks, controls, responsibilities, and accountabilities.
Support the definition of key control testing methodologies, working with control owners to document evidence requirements and testing approaches that are practical, proportionate, and effective within BAU processes.
Drive engagement and confidence in the programme through clear communication, guidance, and regular stakeholder support.
Support the transition from project delivery into BAU ownership by establishing consistent approaches to control monitoring, reporting, and governance.
Maintain accurate and current records of risks, controls, and actions within Decision Focus.
Prepare progress updates, implementation metrics, and status reporting, providing visibility of emerging risks, control weaknesses, and implementation challenges.
Support governance forums through clear management information, action tracking, and escalation.

Desired Qualifications

Familiarity with Decision Focus.

Partnering closely with the business the Risk & Controls Manager will support on a key project to move from the control mapping into embedded risk and control management. You will ensure risks, controls and remediation activities are implemented effectively, owned by the business and sustained as part of business as usual operations.

Lead the development and rollout of Risk and Control Self-Assessments (RCSAs) across all in-scope business functions, translating Risk and Control Matrices into practical, business-owned assessments.
Support risk owners to assess inherent and residual risk, evaluate control effectiveness and define proportionate risk treatment plans.
Track and coordinate remediation arising from control gaps and RCSA outcomes, challenging action owners, maintaining momentum and escalating overdue or high-risk actions through the appropriate governance forums.
Act as the primary point of contact for business stakeholders throughout implementation, providing hands-on support and coaching the First Line on risks, controls, responsibilities and accountabilities.
Support the definition of key control testing methodologies, working with control owners to document evidence requirements and testing approaches that are practical, proportionate and effective within BAU processes.
Drive engagement and confidence in the programme through clear communication, guidance and regular stakeholder support.
Support the transition from project delivery into BAU ownership by establishing consistent approaches to control monitoring, reporting and governance.
Maintain accurate and current records of risks, controls and actions within Decision Focus.
Prepare progress updates, implementation metrics and status reporting, providing visibility of emerging risks, control weaknesses and implementation challenges.
Support governance forums through clear management information, action tracking and escalation

Strong experience in operational risk, controls, assurance or a comparable risk management role within a complex organisation.
Practical experience of designing, implementing or embedding RCSAs and translating risk and control frameworks into business-owned processes.
Proven ability to manage remediation plans, challenge action owners and drive delivery against agreed timelines.
Strong business-partnering skills, with the confidence to advise, coach and constructively challenge stakeholders at different levels.
Clear written and verbal communication skills, including the ability to produce concise management information and governance reporting.
Sound understanding of risk and control principles, including inherent and residual risk, control design, operating effectiveness and risk treatment.
Ability to apply proportionate governance and assurance practices in a regulated environment.
Experience defining control evidence requirements and practical control testing approaches.
Strong analytical and organisational skills, with the ability to manage multiple actions, dependencies and stakeholders.
Experience using a governance, risk and compliance platform; familiarity with Decision Focus would be advantageous.

About the Company

CFC

Cyber risk underwriting through MGA platform

CFC Underwriting is a specialist insurance provider operating as a managing general agent (MGA) that underwrites on behalf of a panel of carriers, focusing on emerging and specialty risks with a strong emphasis on cyber. It uses a proprietary global insurance platform powered by data science to streamline underwriting across a portfolio of 50+ products, including cyber and professional liability, with an in-house incident response team adding comprehensive cyber risk management. It differentiates itself through its early focus on cyber, large in-house claims and incident response capabilities, and a global broker-driven distribution model. Its goal is to deliver fast, precise underwriting and robust risk management for technology-related and other specialty risks worldwide.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: London, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at CFC

See more jobs