Enterprise Risk Manager

The Enterprise Risk Manager is responsible for supporting the ongoing development, implementation, and embedding of Rokstone’s Enterprise Risk Management (“ERM”) Framework. Acting as a trusted second-line risk partner to the business, the role provides independent oversight and challenge across all areas of the organisation, including underwriting, claims, operations, finance, technology, and third-party arrangements. The role will lead risk assessments, support the maintenance of the risk register, monitor key risk indicators and emerging risks, and provide insightful reporting to senior management, Risk Committees, and other governance forums. The Risk Manager will work closely with first-line stakeholders to strengthen the risk and control environment, promote a strong risk culture, and ensure that risk management is embedded within business decision-making as Rokstone continues to grow globally.

Role Accountabilities

Enterprise Risk Management Framework

• Support the ongoing development and enhancement of Rokstone’s ERM Framework, policies, standards, and methodologies.
• Drive consistent application of risk management processes across all business functions.
• Facilitate periodic risk and control assessments across underwriting, claims, finance, operations, technology, and corporate functions.
• Maintain and enhance the enterprise risk register, ensuring risks, controls, actions, and ownership remain current and appropriately documented.
• Support the annual review of the risk appetite framework, including metrics, tolerances, and escalation thresholds.

Risk Oversight and Challenge

• Provide independent second-line oversight and constructive challenge to first-line activities, ensuring key risks are appropriately identified, assessed, and managed.
• Review the effectiveness of controls and challenge remediation plans where weaknesses are identified.
• Support reviews of new products, business initiatives, strategic projects, and operational changes from a risk perspective.
• Identify trends, themes, and emerging risks impacting the business and provide recommendations to management.

Risk Monitoring, MI and Reporting

• Own the production and continuous improvement of risk reporting and dashboards for senior management, Risk Committees, and Boards.
• Monitor Key Risk Indicators (“KRIs”), identifying breaches, deteriorating trends, and emerging areas of concern.
• Work with data and technology teams to improve the quality, automation, and usefulness of risk MI.
• Analyse risk events, incidents, and near misses to identify root causes and systemic control issues.

Risk Events and Issues Management

• Manage the risk event and issue management process, ensuring incidents are appropriately recorded, investigated, escalated, and remediated.
• Track management actions and provide challenge where remediation is delayed or insufficient.
• Ensure lessons learned are captured and embedded into processes and controls.

Scenario Analysis and Emerging Risks

• Lead risk scenario analysis and stress testing activities to assess the potential impact of key risk exposures.
• Maintain oversight of emerging risks, including regulatory change, market developments, technology risks, and operational resilience considerations.

Stakeholder Engagement and Risk Culture

• Develop strong relationships with stakeholders across underwriting, claims, finance, operations, technology, and HR.
• Act as a risk adviser to the business, supporting management in making informed risk-based decisions.
• Promote awareness and understanding of risk management responsibilities across the first line.
• Deliver risk training and awareness initiatives where appropriate.