About Moneybox
At Moneybox, our mission is to give everyone the means to get more out of life. We're guided by our belief that wealth isn't about the money, it's about the means to more - more freedom, opportunities, possibilities, and peace of mind. Moneybox is an award-winning wealth management platform, helping over one and a half million people build wealth throughout their lives, whether they’re saving and investing, buying their first home, or planning for retirement.
Job Brief
The Head of Business Risk & Control leads MBSCL’s consolidated first-line risk and control function: the business-side ownership of advice controls, operational controls, and the oversight of DML-delivered services and third-party vendors. Two Managers report in (Advice Risk & Control and Operations Risk & Control) and the role is the senior first-line counterpart to the Senior Compliance Manager - Advice, whose independent second-line function tests and challenges everything this role produces.
The role reports to the Managing Director for how well the service is running - operational performance, customer outcomes, control effectiveness - and to the Executive Director for the arrangements themselves - the Intra Company Agreement (ICA), third-party contracts, resilience and the open SYSC 8 items. Where an issue is about how the service is performing, it escalates to the MD; where it is about the arrangement itself, it escalates to the Executive Director. Where an issue implicates advice suitability, the Director of Advice retains suitability accountability and consumes your MI and findings on that dimension.
Leading the function
•
Function design - own the design and operation of Moneybox Advice’s first-line risk and control framework across both domains, ensuring it is proportionate, testable and evidenced.
•
Line management - manage and develop the Advice Risk & Control Manager and Operations Risk & Control Manager; set the standards for what good control and oversight look like across the two domains and hold both to them.
•
Integrated MI - bring the advice and operations risk pictures together into a single view of business risk and control health reporting up to the appropriate governance forums.
Advice controls
•
Control ownership - own the first-line control environment for the advice service delivered by the Advice Risk & Control Manager: the file-review and QA programme, input/output validation, monitoring, stress testing, and the operational running of the T&C scheme owned by the Director of Advice.
•
Engine assurance - own the evidence that the Advice System is producing suitable output within the system specifications
•
Interface with the Director of Advice - supply the suitability MI and QA findings the Director of Advice needs to discharge their suitability accountability; consult on specification changes; support T&C evidence.
Operational & outsourcing oversight
•
Intra-group agreement oversight - own the day-to-day oversight of the service provision - service definitions, service levels, performance MI, remediation and escalation - so that the Advice service can demonstrate effective, continuing oversight of its outsourced critical functions.
•
Outsourcing oversight - maintain the outsourcing oversight records that support obligations and governance, working through any open items with Legal and Compliance.
•
Third-party vendors - own the first-line relationship with material third-party providers with contract and service-level management, performance and capacity monitoring against agreed thresholds, service reviews, due-diligence refresh, escalation.
•
Operations oversight - oversee, via the Operations Risk & Control Manager, the delivery of customer support, AML/KYC processing and complaints handling which ladder into service level, quality, and the Consumer Duty support outcome.
•
Resilience and continuity - coordinate with providers on operational resilience and business continuity arrangements for the services Moneybox Advice depends on, including participation in continuity testing.
Essential
•
Substantial risk and control leadership experience in a regulated retail investment, advice or platform business with hands-on ownership of first-line controls.
•
Strong working knowledge of COBS 9A suitability requirements, Consumer Duty (PRIN 2A) and the three-lines-of-defence model in practice.
•
People leadership experience - managing senior specialist managers and building a small team; setting standards and holding both domains to them.
•
Track record of producing risk MI that genuinely informs decisions with concise, decision-ready reporting for senior management and committees.
Desirable
•
Direct experience of advice-side control including file review, suitability monitoring, QA programme design or T&C and of outsourcing or supplier oversight in a regulated context, including familiarity with SYSC 8 expectations.
•
Experience of digital services and of controls over automated systems.
•
Experience of intra-group service arrangements and the discipline of overseeing a group entity as rigorously as a third party.
•
Level 4 Diploma in Regulated Financial Planning or an equivalent qualification.
•
Experience supporting an FCA authorisation, a new regulated service launch, or pre-launch assurance work.
•
Experience of TPRM frameworks and third-party lifecycle management (onboarding, in-life oversight, exit).
- Opportunity to join a fast-growing, award-winning and super ambitious company
- Work with a friendly team of highly motivated individuals
- Be in an environment where you are listened to and can actually have an impact
- Thriving collaborative and inclusive company culture
- Company pension scheme
- Company bonus scheme
- Hybrid working environment
- Home office furniture allowance
- Personal Annual Learning and Development budget
- Private Medical Insurance
- Health Cash Plan – cashback on everyday healthcare like dental and opticians
- Cycle to work scheme – spread the cost of a new bike and accessories