Head of Risk

About the role

A well-established financial services organisation, operating in a regulated environment and undergoing transformation focused on governance, operational resilience and risk maturity, is looking for a Head of Risk. Reporting to the Chief Risk Officer, the role leads the enterprise risk management function and works closely with executive leadership and the Board. It suits an experienced risk leader who can partner with senior stakeholders while keeping strong independence and governance discipline.

Key responsibilities

• Lead and develop the enterprise risk function and foster a high-performing team.
• Drive improvements to the risk management framework, policies and methodologies.
• Oversee risk identification, assessment, monitoring and reporting across the enterprise.
• Develop and maintain risk appetite frameworks, risk profiles and key risk indicators.
• Provide independent risk advice and constructive challenge to executives, board committees and business leaders.
• Lead emerging risk assessments and forward-looking risk analysis.
• Oversee operational resilience, business continuity and third-party risk management.
• Provide second-line oversight of technology, cyber and operational risk.
• Build risk capability through coaching, education and stakeholder engagement.
• Prepare risk reporting for executive leadership, committees and the Board.
• Coordinate assurance across risk, compliance, governance and audit, and support regulator and auditor engagement.

Required profile

• Extensive enterprise risk experience in superannuation, banking, insurance or broader financial services.
• Demonstrated experience in APRA-regulated or similar environments.
• Proven ability to influence executives, Boards and Board Committees.
• Strong people leadership experience building high-performing teams.
• Relevant tertiary qualification; professional risk, governance or assurance qualifications highly regarded.

Required skills

• Enterprise risk frameworks, risk appetite, controls assessment, operational risk and assurance programs.
• Operational resilience, business continuity, outsourcing and third-party risk.
• Technology, cyber security and non-financial risk disciplines.
• Ability to turn complex risk matters into practical business outcomes.