Senior Manager, Controls Framework & RCSA (1LOD Risk)

Vista previa de la oferta

Senior Manager, Controls Framework & RCSA (1LOD Risk)

manager · Risk & Compliance

FTSE Russell | Senior Manager | Location: London / Hybrid

FTSE Russell is seeking an experienced, credible and delivery-focused Senior Manager, Controls Framework & RCSA to lead the design, governance, operation and continuous improvement of the first-line Controls Framework and Risk & Control Self-Assessment programme across the global business!

This role sits within the FTSE Russell Regulatory, Risk & Controls function and acts as the first-line subject matter expert for controls management, control lifecycle governance, controls rationalisation and RCSA methodology. The role is accountable for establishing a credible, complete and sustainable Controls Framework that enables effective risk identification, control design, control assessment, assurance, root cause analysis, risk appetite monitoring and senior management reporting.

The Senior Manager will lead the ongoing uplift of the controls environment across FTSE Russell, including control inventory rationalisation, control taxonomy and classification, process-risk-control mapping, control documentation standards, ownership and accountability models, evidence requirements, governance routines and operating model implementation. The role will ensure that controls are not simply documented, but are clearly linked to business processes, process risks, operational risks, regulatory obligations, incidents, issues, audit findings and RCSA outcomes.

Working closely with business leaders, Product, Operations, Engineering, Corporate Functions, Second Line Risk, Compliance, Internal Audit, Technology and control owners, the role will provide senior-level guidance, challenge and direction to improve control quality, strengthen risk management practices and embed a more consistent, evidence-led and regulator-credible control environment.

The role requires strong technical knowledge of control frameworks and RCSA methodologies, combined with practical delivery experience, collaborator influence, governance discipline and the ability to drive change across a complex, global and regulated business. It is well suited to someone who can operate as both a framework owner and transformation lead: setting standards, mobilising collaborators, overseeing delivery and ensuring outcomes are embedded sustainably.

Key Responsibilities

Controls Framework Ownership

• Own and continuously enhance the FTSE Russell first-line Controls Framework, ensuring it remains credible, complete, sustainable and aligned to LSEG standards and regulatory expectations.

• Establish, maintain and embed control policies, standards, methodologies, templates, guidance and governance requirements across FTSE Russell.

• Define and maintain control taxonomy, control classification criteria, control inventory standards and minimum documentation requirements.

• Set expectations for control objectives, design quality, ownership, frequency, evidence, testing readiness and lifecycle management.

• Ensure consistency in control design, documentation, ownership and evidence standards across business areas, regions and functions.

• Act as the primary first-line SME for controls governance, controls lifecycle management, control quality and framework interpretation.

• Provide senior-level guidance and challenge to business collaborators on control design, adequacy, sustainability and alignment to key risks.

• Ensure the Controls Framework supports wider risk management processes, including RCSA, issue management, incident management, RCA, assurance and risk appetite monitoring.

Controls Uplift and Transformation

• Lead the controls uplift programme across FTSE Russell, ensuring clear scope, governance, milestones, delivery discipline and measurable outcomes.

• Define and implement methodologies for control classification, rationalisation, standardisation and redesign.

• Oversee the identification and removal of duplicate, obsolete, poorly defined or non-control activities from the controls inventory.

• Drive the redesign and standardisation of retained controls, ensuring they are clear, measurable, testable and appropriately aligned to risk.

• Establish minimum standards for control objectives, ownership, frequency, evidence, performance expectations and testing requirements.

• Ensure the control inventory remains accurate, complete, current and capable of supporting assurance, reporting and regulatory scrutiny.

• Oversee control remediation and uplift activity, including delivery tracking, dependency management, issue escalation and closure evidence.

• Support the transition from fragmented control documentation to a more mature, consistent and sustainable control lifecycle model.

• Ensure uplift activity is embedded into BAU governance rather than treated as a one-off clean-up exercise.

Process, Risk and RCSA Integration

• Lead integration of controls with the RCSA framework, ensuring assessments are grounded in a clear understanding of process risks and control coverage.

• Ensure key controls are mapped to business processes, process risks, operational risks and relevant risk taxonomy categories.

• Oversee alignment between controls, incidents, issues, audit findings, RCA outcomes, assurance results and RCSA conclusions.

• Ensure root cause analysis and incident/issue themes are used to inform control improvements, assessment activity and remediation priorities.

• Drive a consistent methodology for risk and control assessment globally, including clear standards for inherent risk, control effectiveness, residual risk and action planning.

• Ensure RCSA outputs are evidence-based, comparable across business areas and capable of supporting senior management and Board-level reporting.

• Support the translation of RCSA outcomes into remediation actions, issue creation, control uplift or targeted assurance activity where required.

• Promote better linkage between risk appetite, key risk indicators, control performance and assessment outcomes.

Governance and Operating Model

• Establish and embed the future-state Controls Framework and RCSA operating model across FTSE Russell.

• Define clear RACI structures across control owners, process owners, risk coordinators, first-line risk teams, Control Utility, Second Line Risk and assurance functions.

• Implement control governance forums, design authorities, working groups and decision-making processes to support control lifecycle discipline.

• Develop periodic controls review, control attestation and inventory certification processes.

• Ensure robust lifecycle management for all controls, including creation, review, amendment, retirement and escalation.

• Define governance standards for control changes, rationalisation decisions, control exceptions, evidence gaps and remediation activity.

• Ensure controls governance outputs are documented, decisioned and audit-ready.

• Support sustainable embedding of controls ownership across the business, reducing dependency on central teams and improving accountability at source.

Reporting and Management Information

• Develop and maintain controls and RCSA management information that provides meaningful insight into control population quality, control effectiveness, control coverage and framework maturity.

• Track controls uplift progress, rationalisation outcomes, inventory health, overdue reviews, remediation activities and key framework milestones.

• Deliver clear, action-oriented reporting to Executive Committees, Risk Committees, governance forums and senior collaborators.

• Support risk appetite, assurance, operational resilience, regulatory and audit reporting requirements through accurate and defensible controls data.

• Provide insight into emerging themes, control weaknesses, systemic drivers, repeat issues and areas of heightened risk.

• Ensure MI moves beyond activity reporting to highlight what is changing, what remains at risk and where senior management action is required.

• Establish consistent reporting definitions, data quality standards and reconciliation routines across control and RCSA reporting.

• Use reporting to drive accountability, prioritisation and improvement across business-owned controls.

Stakeholder Management and Advisory

• Build strong partnerships with senior collaborators across Product, Operations, Engineering, Corporate Functions, Technology, Second Line Risk, Compliance and Internal Audit.

• Act as a trusted advisor to business leaders and control owners on controls framework requirements, control design, risk assessment and governance expectations.

• Facilitate senior workshops, challenge sessions and decision forums to support control uplift, RCSA execution and operating model implementation.

• Influence collaborators to adopt consistent control standards, address gaps and embed stronger control ownership.

• Support regulatory reviews, Internal Audit activity, second-line challenge and assurance engagements by ensuring control information is clear, complete and defensible.

• Translate technical control and risk concepts into clear, practical guidance for business collaborators.

• Escalate material control weaknesses, delivery risks, ownership gaps or unresolved remediation matters in a timely and structured way.

• Represent the first-line controls framework in senior governance discussions where required.

Continuous Improvement and Risk Culture

• Identify opportunities to improve the effectiveness, efficiency and sustainability of the Controls Framework and RCSA programme.

• Drive automation, workflow optimisation and data quality improvements within MetricStream and supporting tooling.

• Monitor relevant industry practice, regulatory expectations and internal lessons learned to inform framework evolution.

• Promote a strong controls culture across FTSE Russell by reinforcing clear ownership, transparency, evidence-based assessment and disciplined remediation.

• Drive maturity of the controls environment from inventory maintenance toward risk-aligned, assurance-ready and insight-led controls management.

• Support capability building across control owners and risk coordinators through guidance, training, templates and practical support.

• Embed continuous feedback loops between controls, incidents, issues, RCA, audit findings, RCSA and risk appetite reporting.

• Ensure improvements are sustainable, repeatable and embedded into BAU governance rather than dependent on individual effort.

Knowledge, Skills & Experience

Essential

• Significant experience in operational risk, controls management, risk governance, internal controls, assurance, audit or a comparable regulated environment.

• Extensive knowledge of controls frameworks, control lifecycle management and RCSA methodologies.

• Proven experience leading controls transformation, controls uplift, remediation or framework redesign programmes.

• Experience performing or leading controls rationalisation, standardisation, inventory remediation or control quality improvement activity.

• Strong understanding of the relationship between processes, risks, controls, issues, incidents, audit findings and risk assessments.

• Experience operating within a highly regulated financial services, market infrastructure or similar complex environment.

• Strong collaborator management and influencing skills, including the ability to engage seniorcollaboratorss and challenge constructively.

• Strong analytical capability, with the ability to interpret complex information, identify themes and translate findings into practical action.

• Experience developing controls MI, governance reporting, maturity reporting or committee materials for senior audiences.

• Ability to design standards and methodologies while also driving practical implementation and delivery.

• Excellent written and verbal communication skills, including the ability to produce clear, defensible and executive-ready materials.

• Strong delivery discipline, with the ability to manage multiple priorities, dependencies and collaborator expectations.

Desirable

• Experience with MetricStream or equivalent GRC platforms.

• Experience supporting regulatory remediation programmes, Internal Audit reviews, second-line assurance activity or Section 166 reviews.

• Knowledge of benchmark administration, market infrastructure, financial market operations, index, data or analytics businesses.

• Professional qualifications in risk management, audit, governance, compliance or a related discipline.

• Experience implementing RCSA methodology improvements, control attestation processes or risk appetite reporting enhancements.

• Experience working across global teams and influencing stakeholders across multiple regions.

Why Join FTSE Russell?

• FTSE Russell operates in a highly regulated, client-critical environment where strong controls, reliable risk assessment and evidence-based governance are essential to maintaining client, market and regulatory trust.

• In this role, you will lead the development and maturity of a core first-line Controls Framework and RCSA programme, shaping how risks and controls are identified, assessed, owned, governed and reported across the business. You will work closely with senior collaborators across Product, Operations, Engineering, Corporate Functions, Second Line Risk, Compliance, Internal Audit and Technology.

• This is an opportunity to play a visible and high-impact role in strengthening FTSE Russell’s control environment, improving the quality and consistency of risk assessment, and embedding a more sustainable, transparent and defensible controls operating model across the global business.

Career Stage:

London Stock Exchange Group (LSEG) Information:

Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.