Head of Risk & Compliance

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Head of Risk & Compliance

Department: Finance

Employment Type: Full Time

Location: London

Description

The Head of Risk and Compliance at Reward is accountable for leading and overseeing the organization's comprehensive governance of information security, risk, compliance, quality, and sustainability management. This role includes identifying, assessing, and mitigating risks, ensuring strict adherence to regulatory requirements, and developing robust policies and procedures to align with the organization's strategic goals.

This leadership position requires extensive experience and expertise in information security governance, risk management, and compliance. The role involves collaborating closely with senior management, various departments, and external stakeholders to cultivate a culture of compliance and heightened risk awareness across the organization. They are the primary liaison for client compliance teams and play a critical role in safeguarding Reward's brand and reputation.

Reward seeks a dynamic individual who is passionate about making a substantial impact within a high-growth, high-performing organisation, driven by the opportunity to excel in this key strategic function.

Key Responsibilities

Risk Management:

• Develop and implement comprehensive risk management frameworks and strategies.
• Identify, assess, and mitigate operational, financial, legal, and strategic risks.
• Monitor and report on risk exposure and the effectiveness of risk management processes.
• Conduct regular risk assessments, audits, and implement corrective actions.
• Advise senior management on risk-related issues and recommend mitigation strategies.

Compliance Management:

• Ensure compliance with all relevant laws, regulations, and industry standards.
• Develop, implement, and maintain compliance policies and procedures.
• Oversee compliance training programs for employees.
• Monitor adherence to internal policies and conduct compliance audits.
• Report compliance issues and breaches to senior management and regulatory bodies.
• Maintain accountability for certifications (PCI DSS, ISO 27001, ISO 9001, EcoVadis, BCorp).
• Manage external audits and due diligence exercises from banks, merchants, and partners.

Policy Development:

• Develop and update risk and compliance policies and procedures.
• Ensure effective communication and implementation of policies across the organization.
• Stay current with regulatory changes and industry best practices to update policies accordingly.

Leadership and Collaboration:

• Collaborate with departments to integrate risk management and compliance into business processes.
• Act as a key contact for regulatory authorities and external auditors.
• Promote a culture of risk awareness and compliance throughout the organization.

Reporting, Analysis, and Corporate Sustainability:

• Prepare and present reports on risk and compliance activities to executive team and board.
• Analyse trends and provide insights to support strategic decision-making.
• Develop key risk indicators (KRIs) and key performance indicators (KPIs) for monitoring program effectiveness.
• Propose, draft, and implement strategies and policies for corporate sustainability.
• Evaluate sustainability program efficiency and recommend improvements.

Additional Responsibilities:

• Act as the Data Protection Officer
• Oversee business continuity plans and annual Business Impact Analysis (BIA).
• Ensure Information Assets, Key Suppliers, Data Retention, and Information Security (IS) repositories are current and compliant.

Skills Knowledge and Expertise

Strong Knowledge and Expertise:

• In-depth understanding of risk management frameworks, compliance regulations, and best practices in compliance and governance.
• Proficiency in risk management and compliance software/tools.
• Extensive knowledge of common information security management/governance frameworks, such as PCI DSS and ISO 27001.
• Ability to drive and manage Quality Management (ISO9001), BCorp, and EcoVadis assessments.
• Up-to-date knowledge of standards and operating methods in the card payment industry.

Analytical and Problem-Solving Skills:

• Excellent analytical, problem-solving, and decision-making capabilities.
• Broad and pragmatic thinker, able to interpret information quickly and present clear, reasoned arguments.

Communication and Interpersonal Skills:

• Exceptional communication and interpersonal skills.
• Ability to establish relationships and influence key stakeholders at all levels of the organization.

Adaptability and Resilience:

• Ability to work effectively under pressure and manage multiple priorities.
• Adaptable to a fast-paced and changing environment.

Attention to Detail:

• Thorough and accurate, capable of identifying key issues without getting lost in the detail.
• Ability to manage tight processes with a focus on accuracy and attention to detail.

Educational and Support Role:

• Provide support, education, and training to colleagues to build risk awareness within the organization.
• Demonstrable ability to act as a leading authority on information security, providing guidance on the governance and management of information security risks.

Benefits

• Annual Leave: 25 days + bank holidays and increasing by one day a year to 30 days
• Company holiday: 3 additional days off between Christmas & New Years
• Ability to buy and sell holiday days as well as the ability to bank days (tenure dependant)
• Flexible working options: we are operating a hybrid working model with 3 days a week from the office
• Pension: Hargreaves Lansdown - 6% matched contribution
• Employee share scheme
• Generous family friendly cover
• Private healthcare - Bupa
• Income protection
• Critical illness cover
• Life insurance cover
• Dental cover
• Optical cover
• Yulife app for access to employee wellbeing and discounts
• Perks at Work, cashback/discount shopping site
• Employee referral scheme
• Salary sacrifice program which includes cycle to work scheme, electric car scheme and season ticket loans
• Volunteering program
• Company events i.e. Christmas party, all-company event and other social/hosted events during the year (we have an active social committee!)
• Team socials