Controls Governance Manager

General Job Title:  Controls Governance Manager  Location:  Flexible    Division:  Risk & Compliance: Risk    Reports To:  Head of Controls Assurance  Key Relationships:     Head of Controls Assurance  Head of Enterprise Risk Management   Risk & Governance Leads in Business Areas   Risk Owners/ Managing Risk Owners  Compliance   Head of Operational risk  Head of Insurance risk  Co-sourced Provider of “Controls Testing Services” Job Summary: To strengthen first‑line accountability and provide independent second line assurance over key financial, operational, and regulatory controls, we have restructured our Controls and Compliance Assurance team. Reporting to the Head of Controls Assurance, the Controls Governance Manager will be responsible for defining and maintaining the controls testing methodology, overseeing governance and operational effectiveness, and ensuring high-quality reporting to senior stakeholders.  This role is central to establishing a robust, Solvency II‑aligned Internal Controls Framework for a large global. The successful candidate will act as the technical authority for controls testing, lead quality assurance activities, oversee performance of the outsourced testing services provider, and own the organisation’s master reporting suite (“single version of the truth”) for controls. Strong stakeholder engagement and deep expertise in controls best practice are essential.    Key Responsibilities  Ownership of Key Controls Frameworks Develop, maintain, and continuously enhance the controls testing methodology, including sampling strategies, walkthrough standards, and evidence requirements.  Ensure the methodology reflects best practice across the insurance sector and is updated in line with Solvency II (equivalent), PRA/FCA expectations, and emerging approaches such as automation and data‑enabled testing.  Provide authoritative guidance to the Controls and Compliance Assurance team and first‑line controls owners on technical design and testing requirements.  Oversight Support for the Outsourced Testing Services Provider Support the Head of Controls Assurance in governing the Outsourced Provider of Controls Testing Services.  Establish and operate mechanisms to monitor supplier performance, including:   contract management and SLA tracking  technical quality reviews  issue trends analysis  performance dashboards and KPI monitoring  Lead quality assurance reviews of all outsourced testing output, ensuring consistency, robustness and compliance with internal standards.  Lead Risk-Based Assurance Planning Lead the annual refresh of the Compliance Universe and the development of the thematic review and controls testing plans, applying a risk-based methodology to prioritise assurance activity. Coordinate with other assurance functions and business stakeholders to ensure the plans reflect key and emerging risks, regulatory priorities, business needs, and areas of potential assurance overlap or reliance. Present the proposed plans, together with the supporting risk assessment and rationale, to the relevant senior stakeholders and governance committees for review and approval. Maintain oversight of the approved plans throughout the year and quarterly recommend changes where developments in the organisation’s risk profile or business priorities require assurance coverage to be adjusted. Lead Production of Enterprise Controls Reporting Own and manage the organisation’s “single version of the truth” for controls reporting, integrating data from:   the GRC system  internal oversight activities  outsourced testing results  Produce high‑quality, timely reporting for senior management, including materials for ExCo, Audit Committee, and Risk & Regulatory Committee.  Ensure reporting clearly articulates control weaknesses, themes, remediation progress, and emerging risk insights.  Stakeholder Relationship Management Own assigned relationships with key Risk & Governance Leads across major business units (e.g., Finance, Claims, Underwriting, Operations, Investments, etc.).  Provide subject‑matter expertise to support business areas in strengthening control design and remediation of issues.  Act as a trusted advisor, offering technical insight while maintaining appropriate second‑line challenge.  Controls Best Practice Advisory Serve as an internal expert on controls best practice, staying current with:   developments in the insurance market  Solvency II (equivalent) and relevant regulatory regimes and their governance requirements  risk and controls assurance practices  automation, data analytics and continuous controls monitoring  Partner with the outsourced testing provider to bring fresh insights and thought leadership into the organisation.  Management of the Controls Standard, Library & Hierarchy Maintain the controls standard, library and hierarchy within the GRC platform.  Monitor first‑line use of the GRC tool and drive improvements in control descriptions, risk‑control mappings and documentation quality.  Ensure consistent taxonomy and alignment with the broader Risk Management Framework.  Attestations Coordinate and oversee the periodic controls attestation process, ensuring accuracy, consistency and completeness across all business areas.  Work closely with Controls and Compliance Assurance colleagues to support their interactions with their assigned business stakeholders.  People Development Lead the development of technical controls capability within the Controls and Compliance Assurance team.  Design and deliver training for both the team and first‑line stakeholders, supporting broader organisational control maturity.  Mentor colleagues and lead cross‑team activities, such as coordinated quality reviews of outsourced testing work.  Operational Management Support operational responsibilities of the Controls and Compliance Assurance team, including budget planning, resource allocation, recruitment and process improvement.  Contribute to the effective running of governance forums, planning cycles and resourcing discussions.   Person Specification:  Essential Criteria Deep subject matter expertise in internal control frameworks, control testing methodologies, and risk-based sampling techniques. Proven experience overseeing outsourced assurance providers, including quality assurance, contract performance management, service delivery monitoring, and SLA governance. Demonstrated ability to lead the development and execution of strategic, risk-based annual control testing plans and compliance thematic review programmes. Professional accounting qualification (ACA, ACCA, CPA, or equivalent).

This listing is longer than we store. Read the rest on Beazley's careers page →