Risk Manager

About Moneybox At Moneybox, our mission is to give everyone the means to get more out of life. We're guided by our belief that wealth isn't about the money, it's about the means to more - more freedom, opportunities, possibilities, and peace of mind. Moneybox is an award-winning wealth management platform, helping over one and a half million people build wealth throughout their lives, whether they’re saving and investing, buying their first home, or planning for retirement.

Job Brief

Moneybox Services Company Ltd (MBSCL) is building the next generation of financial advice: an advice service underpinned by advanced technology and the expertise of personal financial advice professionals that gives everyday people access to regulated, personalised advice at a scale traditional advice has never reached. We're building MBSCL's second line from the ground up, and this role is central to making sure the right risk and control framework is in place for go-live, and that it grows with the business.

As Risk Manager you'll implement the Moneybox group's risk management framework for MBSCL's advice business and provide independent oversight of its risk profile. That means getting the core building blocks in place and working in practice: risk appetite statements and KRIs, risk and control self-assessments (RCSAs), risk event and incident management, the capital and liquidity adequacy assessment and wind-down plan, operational resilience and third-party risk. MBSCL is independent from Digital Moneybox Limited (DML), the main Moneybox operating business, but relies on DML for its platform, the Aurora advice engine and a range of shared services, so you'll also assess and challenge the risks that dependency creates.

You will report to MBSCL's Head of Risk and Compliance (SMF16/17), with a dotted line into the wider Moneybox Risk and Compliance team (so you can draw on the group's existing framework and specialists), and work closely with MBSCL's small executive team and first line advice colleagues. In the build phase you'll be hands-on, helping the business describe, design and embed the controls needed for go-live, while keeping control ownership with the first line and maintaining your independent challenge. This is a role for someone who enjoys building in a small team and wants to grow with it as the function scales.

What you'll do

• Implement the Moneybox group's risk management framework for MBSCL, adapting the risk taxonomy, policies, governance and tooling to an advice business, to give MBSCL a proportionate, embedded framework in place for go-live.

• Develop and maintain MBSCL's risk appetite statements, tolerances and KRIs with the executive and Board, and monitor performance against them, to set clear boundaries for the business and give early warning of problems.

• Support the business to run risk and control self-assessments (RCSAs), documenting risks, controls and actions, and provide independent challenge of the results, to ensure controls are adequate and operating effectively.

• Work hands-on with the business to describe, design and embed the controls needed for go-live, including around the advice journey and the AI advice engine, keeping ownership with the first line, to ensure the service launches with an appropriate control environment.

• Lead production of MBSCL's capital and liquidity adequacy assessment and wind-down plan, including scenario and stress testing, working with Finance and the executive, to ensure MBSCL is financially resilient and could wind down in an orderly way.

• Provide independent oversight of MBSCL's risk profile across conduct, operational, financial, model and AI, data and third-party risks, and produce clear risk MI for the Board, Advice Oversight Committee and executive, to give decision-makers a clear view of risk.

• Establish and run the risk event, incident and breach process, including root-cause analysis and tracking of remediation to closure, to ensure issues are captured, learned from and closed out.

• Design and deliver a second line control testing and assurance plan for key controls, to evidence that controls operate effectively as MBSCL scales.

• Oversee MBSCL's operational resilience and business continuity, including important business services, impact tolerances, mapping and scenario testing, to ensure MBSCL can remain within its impact tolerances.

• Assess and challenge the risks arising from MBSCL's dependency on DML and other third parties, including supplier risk assessments, service level performance and exit and contingency planning, to evidence that MBSCL independently manages group supplier risk.

• Provide second line risk opinions on new propositions, advice engine and House Rules changes and significant initiatives, to ensure risks are understood and within appetite before launch.

• Support the Head of Risk and Compliance with Board, committee and FCA engagement on risk matters, and build risk awareness through training and business partnering, to embed a strong risk culture.

Who you are

• You're a builder who enjoys creating frameworks from scratch and making them work in practice, and you're comfortable with change and ambiguity in a small team.

• You're pragmatic and hands-on: you'll roll up your sleeves with the business on controls, and you know where to draw the line between supporting and owning.

• You have sound independent judgement and the confidence to challenge senior stakeholders, including at a group supplier, constructively and with evidence.

• You're numerate and structured, comfortable with capital, liquidity and scenario analysis, and able to turn complex risk into clear, decision-ready MI.

• You're curious about technology and AI, and keen to understand the risks of automated advice and platform dependencies.

• You work well in a matrix, partnering closely with a small executive team and a wider group, and you want to grow as the function scales.

Experience & Skills

• Substantial experience in a second line risk role within an FCA-regulated investment, wealth, platform or fintech firm.

• Hands-on experience implementing or running a risk management framework, including risk taxonomy, risk appetite, KRIs, RCSAs, risk event management and risk reporting.

• Working knowledge of the FCA prudential regime for exempt CAD firms, including the wind down process, own funds and liquid assets requirements.

• Working knowledge of operational resilience (SYSC 15A) and of outsourcing and third-party risk (SYSC 8).

• Understanding of the FCA conduct framework (Consumer Duty, COBS, SM&CR) sufficient to assess conduct risk in an advice context.

• Experience supporting a new regulated service launch, an FCA authorisation or a similar build environment is highly desirable.

• Technology, platform or model risk experience, including automated or AI-driven decisioning, is beneficial but not essential.

• Experience of group structures, including relying on or overseeing a group supplier, is advantageous.

• Ability to produce clear risk MI and papers that stand up to Board and regulator scrutiny.

• A recognised risk qualification (for example an IRM Certificate or Diploma in Enterprise Risk Management) is desirable.

What's in it for you?

• Opportunity to join a fast-growing, award-winning and super ambitious startup.

• Work with a friendly team of highly motivated individuals.

• Be in an environment where you are listened to and can actually have an impact.

• Thriving collaborative and inclusive company culture.

• Company pension scheme.

• Company bonus scheme.

• Hybrid working environment.

• Home office furniture allowance.

• Personal Annual Learning and Development budget.

• Private Medical Insurance.

• Health Cash Plan - cashback on everyday healthcare like dental and opticians.

• Cycle to work scheme - spread the cost of a new bike and accessories.

• CycleSaver - save on bike-share subscriptions and have a more sustainable commute.

• Wellhub subscription to a variety of gyms and wellbeing apps.

• Enhanced parental pay & leave.

• 25 days holiday + bank holidays with additional days added with length of service.

Our Commitment to DE&I: At Moneybox, we promote, support and celebrate inclusion, diversity and equity for all, so that everyone can bring their full selves to work. We believe that diversity drives innovation, and that if our team is representative of our community of customers, we can better support their needs. To ensure our recruitment processes provide an equal opportunity for all applicants to succeed, we encourage you to let us know if there are any adjustments that we can make. We are open-minded and always willing to go the extra mile to ensure all applicants can present their full self and potential   Working Policy: We have a hybrid policy that includes 2 days from our London office and 3 from home. If the role states it is either hybrid or remote candidates must be based within the UK.   Visa Sponsorship: At this time we cannot offer visa sponsorship for this role and we cannot consider overseas applications.   Please read before you apply! Please note if offered a position, the offer is conditional and subject to the receipt of satisfactory pre-employment checks which we will conduct such as criminal record and adverse credit history checks. As a regulated financial business, an adverse financial history could impact your suitability for the role. If you are aware of anything that could affect your suitability for the role, please let us know in advance.   By sending us your application you acknowledge and agree to Moneybox using your personal data as described below.   We collect applicants’ personal data to manage our recruitment related activities. Consequently, we may use your personal data to evaluate your application, to select and shortlist applicants, to set up and conduct interviews and tests, to evaluate and assess the results, and as is otherwise needed in the recruitment process generally.We do not share your personal data with unauthorised third parties. However, we may, if necessary, share your personal data to carefully selected third parties acting on our behalf. This may include transfers to servers and databases outside the country where you provided us with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America.   If you are unsuccessful in your application, we may keep your details on file so that we can tell you about other suitable vacancies which may be of interest to you when they arise in the future.   If you would like to reach us then please email: talent@moneyboxapp.com   If you would rather we did not keep your details on file, you can contact us at: DPO@moneyboxapp.com