Controls Governance Manager

General:

Job Title: Controls Governance Manager

Location: Flexible

Division: Risk & Compliance: Risk

Reports To: Head of Controls Assurance

Key Relationships:

• Head of Controls Assurance

• Head of Enterprise Risk Management

• Risk & Governance Leads in Business Areas

• Risk Owners/ Managing Risk Owners

• Compliance

• Head of Operational risk

• Head of Insurance risk

• Co-sourced Provider of “Controls Testing Services”

Job Summary:

To strengthen first‑line accountability and provide independent second line assurance over key financial, operational, and regulatory controls, we have restructured our Controls and Compliance Assurance team. Reporting to the Head of Controls Assurance, the Controls Governance Manager will be responsible for defining and maintaining the controls testing methodology, overseeing governance and operational effectiveness, and ensuring high-quality reporting to senior stakeholders.

This role is central to establishing a robust, Solvency II‑aligned Internal Controls Framework for a large global. The successful candidate will act as the technical authority for controls testing, lead quality assurance activities, oversee performance of the outsourced testing services provider, and own the organisation’s master reporting suite (“single version of the truth”) for controls. Strong stakeholder engagement and deep expertise in controls best practice are essential.

Key Responsibilities

• Ownership of Key Controls Frameworks

• Develop, maintain, and continuously enhance the controls testing methodology, including sampling strategies, walkthrough standards, and evidence requirements.

• Ensure the methodology reflects best practice across the insurance sector and is updated in line with Solvency II (equivalent), PRA/FCA expectations, and emerging approaches such as automation and data‑enabled testing.

• Provide authoritative guidance to the Controls and Compliance Assurance team and first‑line controls owners on technical design and testing requirements.

• Oversight Support for the Outsourced Testing Services Provider

• Support the Head of Controls Assurance in governing the Outsourced Provider of Controls Testing Services.

• Establish and operate mechanisms to monitor supplier performance, including:

• contract management and SLA tracking

• technical quality reviews

• issue trends analysis

• performance dashboards and KPI monitoring

• Lead quality assurance reviews of all outsourced testing output, ensuring consistency, robustness and compliance with internal standards.

• Lead Risk-Based Assurance Planning

• Lead the annual refresh of the Compliance Universe and the development of the thematic review and controls testing plans, applying a risk-based methodology to prioritise assurance activity.

• Coordinate with other assurance functions and business stakeholders to ensure the plans reflect key and emerging risks, regulatory priorities, business needs, and areas of potential assurance overlap or reliance.

• Present the proposed plans, together with the supporting risk assessment and rationale, to the relevant senior stakeholders and governance committees for review and approval.

• Maintain oversight of the approved plans throughout the year and quarterly recommend changes where developments in the organisation’s risk profile or business priorities require assurance coverage to be adjusted.

• Lead Production of Enterprise Controls Reporting

• Own and manage the organisation’s “single version of the truth” for controls reporting, integrating data from:

• the GRC system

• internal oversight activities

• outsourced testing results

• Produce high‑quality, timely reporting for senior management, including materials for ExCo, Audit Committee, and Risk & Regulatory Committee.

• Ensure reporting clearly articulates control weaknesses, themes, remediation progress, and emerging risk insights.

• Stakeholder Relationship Management

• Own assigned relationships with key Risk & Governance Leads across major business units (e.g., Finance, Claims, Underwriting, Operations, Investments, etc.).

• Provide subject‑matter expertise to support business areas in strengthening control design and remediation of issues.

• Act as a trusted advisor, offering technical insight while maintaining appropriate second‑line challenge.

• Controls Best Practice Advisory

• Serve as an internal expert on controls best practice, staying current with:

• developments in the insurance market

• So…