Associate Director - Enterprise Risk Management

Role overview

The Associate Director of Enterprise Risk Management will work closely with senior leaders in the Enterprise Risk function to strengthen, refine, and supervise the Group’s Enterprise Risk Management Framework. The position is focused on creating clear visibility for risk oversight, escalation, reporting, and engagement across the Enterprise Risk team, senior management, and the relevant Boards at Waystone Group.

Key responsibilities

• Provide oversight for the Enterprise Risk Management Framework and associated control assurance activities across the Group.
• Ensure the ERMF is effectively embedded by supporting consistent risk identification, assessment, monitoring, escalation, and reporting in partnership with first-line stakeholders.
• Lead the enhancement and execution of the Group’s Control Assurance framework, making sure risks, controls, and assurance work are clearly connected.
• Design, launch, and embed 1LOD Controls Self-Assessments across the Group, maintaining consistency, high-quality outputs, and useful insight into risks and controls.
• Plan and carry out periodic risk-based second-line testing and assurance through the Controls Assurance Assessment Programme, covering both control design and operational effectiveness.
• Oversee the twice-yearly Risk Control-Self Assessments for Core Function teams, ensuring disciplined challenge, consistent application, and alignment with the Risk Management Framework.
• Support the continued development of the framework by improving methods, standards, tools, and documentation.
• Create and improve risk dashboards and reporting packs for senior management, Risk Committees, and Boards.
• Translate testing activity, including CSA, RSCA, and CAAP, into concise, structured, and practical risk insights for the Enterprise Risk team.
• Build trusted working relationships with Business Units, Core Functions, and jurisdictions while acting as a strong second-line partner.
• Help strengthen a consistent risk and control culture through communication, training, and engagement initiatives.
• Contribute to the long-term development and maturity of the Enterprise Risk function.

Experience and qualifications

Applicants should hold an internationally recognised professional qualification and have a strong academic background, ideally with a degree in Finance, Business, Economics, or a closely related discipline.

Relevant experience should include enterprise risk, compliance, or process/control auditing, preferably within a regulated setting. The role also calls for strong analytical and critical thinking skills, the ability to identify key risk themes, and the judgement to apply practical and independent decision-making in a fast-moving environment.

Successful candidates should be comfortable working across teams and seniority levels, managing several priorities at once, and maintaining a high level of documentation quality and attention to detail. Strong capability with Power BI for reporting and data visualisation is expected, along with solid MS Office proficiency.

Additional requirements

The role requires someone who can collaborate effectively, communicate clearly, and support the continued improvement of enterprise risk practices across the organisation.