Senior Manager, Controls Framework & RCSA (1LOD Risk)

FTSE Russell Senior Manager Location: London / Hybrid

Key Responsibilities

• Own and continuously enhance the FTSE Russell first-line Controls Framework, ensuring it remains credible, complete, sustainable and aligned to LSEG standards and regulatory expectations. Establish, maintain and embed control policies, standards, methodologies, templates, guidance and governance requirements across FTSE Russell. Define and maintain control taxonomy, control classification criteria, control inventory standards and minimum documentation requirements. Set expectations for control objectives, design quality, ownership, frequency, evidence, testing readiness and lifecycle management. Ensure consistency in control design, documentation, ownership and evidence standards across business areas, regions and functions. Act as the primary first-line SME for controls governance, controls lifecycle management, control quality and framework interpretation. Provide senior-level guidance and challenge to business collaborators on control design, adequacy, sustainability and alignment to key risks. Ensure the Controls Framework supports wider risk management processes, including RCSA, issue management, incident management, RCA, assurance and risk appetite monitoring.
• Lead the controls uplift programme across FTSE Russell, ensuring clear scope, governance, milestones, delivery discipline and measurable outcomes. Define and implement methodologies for control classification, rationalisation, standardisation and redesign. Oversee the identification and removal of duplicate, obsolete, poorly defined or non-control activities from the controls inventory. Drive the redesign and standardisation of retained controls, ensuring they are clear, measurable, testable and appropriately aligned to risk. Establish minimum standards for control objectives, ownership, frequency, evidence, performance expectations and testing requirements. Ensure the control inventory remains accurate, complete, current and capable of supporting assurance, reporting and regulatory scrutiny. Oversee control remediation and uplift activity, including delivery tracking, dependency management, issue escalation and closure evidence. Support the transition from fragmented control documentation to a more mature, consistent and sustainable control lifecycle model. Ensure uplift activity is embedded into BAU governance rather than treated as a one-off clean-up exercise.
• Lead integration of controls with the RCSA framework, ensuring assessments are grounded in a clear understanding of process risks and control coverage. Ensure key controls are mapped to business processes, process risks, operational risks and relevant risk taxonomy categories. Oversee alignment between controls, incidents, issues, audit findings, RCA outcomes, assurance results and RCSA conclusions. Ensure root cause analysis and incident/issue themes are used to inform control improvements, assessment activity and remediation priorities. Drive a consistent methodology for risk and control assessment globally, including clear standards for inherent risk, control effectiveness, residual risk and action planning. Ensure RCSA outputs are evidence-based, comparable across business areas and capable of supporting senior management and Board-level reporting. Support the translation of RCSA outcomes into remediation actions, issue creation, control uplift or targeted assurance activity where required. Promote better linkage between risk appetite, key risk indicators, control performance and assessment outcomes.
• Establish and embed the future-state Controls Framework and RCSA operating model across FTSE Russell. Define clear RACI structures across control owners, process owners, risk coordinators, first-line risk teams, Control Utility, Second Line Risk and assurance functions. Implement control governance forums, design authorities, working groups and decision-making processes to support control lifecycle discipline. Develop periodic controls review, control attestation and inventory certification processes. Ensure robust lifecycle management for all controls, including creation, review, amendment, retirement and escalation. Define governance standards for control changes, rationalisation decisions, control exceptions, evidence gaps and remediation activity. Ensure controls governance outputs are documented, decisioned and audit-ready. Support sustainable embedding of controls ownership across the business, reducing dependency on central teams and improving accountability at source.
• Develop and maintain controls and RCSA management information that provides meaningful insight into control population quality, control effectiveness, control coverage and framework maturity. Track controls uplift progress, rationalisation outcomes, inventory health, overdue reviews, remediation activities and key framework milestones. Deliver clear, action-oriented reporting to Executive Committees, Risk Committees, governance forums and senior collaborators. Support risk appetite, assurance, operational resilience, regulatory and audit reporting requirements through accurate and defensible controls data. Provide insight into emerging themes, control weaknesses, systemic drivers, repeat issues and areas of heightened risk. Ensure MI moves beyond activity reporting to highlight what is changing, what remains at risk and where senior management action is required. Establish consistent reporting definitions, data quality standards and reconciliation routines across control and RCSA reporting. Use reporting to drive accountability, prioritisation and improvement across business-owned controls.
• Build strong partnerships with senior collaborators across Product, Operations, Engineering, Corporate Functions, Technology, Second Line Risk, Compliance and Internal Audit. Act as a trusted advisor to business leaders and control owners on controls framework requirements, control design, risk assessment and governance expectations. Facilitate senior workshops, challenge sessions and decision forums to support control uplift, RCSA execution and operating model implementation. Influence collaborators to adopt consistent control standards, address gaps and embed stronger control ownership. Support regulatory reviews, Internal Audit activity, second-line challenge and assurance engagements by ensuring control information is clear, complete and defensible. Translate technical control and risk concepts into clear, practical guidance for business collaborators. Escalate material control weaknesses, delivery risks, ownership gaps or unresolved remediation matters in a timely and structured way. Represent the first-line controls framework in senior governance discussions where required.
• Identify opportunities to improve the effectiveness, efficiency and sustainability of the Controls Framework and RCSA programme. Drive automation, workflow optimisation and data quality improvements within MetricStream and supporting tooling. Monitor relevant industry practice, regulatory expectations and internal lessons learned to inform framework evolution. Promote a strong controls culture across FTSE Russell by reinforcing clear ownership, transparency, evidence-based assessment and disciplined remediation. Drive maturity of the controls environment from inventory maintenance toward risk-aligned, assurance-ready and insight-led controls management. Support capability building across control owners and risk coordinators through guidance, training, templates and practical support. Embed continuous feedback loops between controls, incidents, issues, RCA, audit findings, RCSA and risk appetite reporting. Ensure improvements are sustainable, repeatable and embedded into BAU governance rather than dependent on individual effort.

Knowledge, Skills & Experience Essential Significant experience in operational risk, controls management, risk governance, internal controls, assurance, audit or a comparable regulated environment. Extensive knowledge of controls frameworks, control lifecycle management and RCSA methodologies. Proven experience leading controls transformation, controls uplift, remediation or framework redesign programmes. Experience performing or leading controls rationalisation, standardisation, inventory remediation or control quality improvement activity. Strong understanding of the relationship between processes, risks, controls, issues, incidents, audit findings and risk assessments. Experience operating within a highly regulated financial services, market infrastructure or similar complex environment. Strong collaborator management and influencing skills, including the ability to engage seniorcollaboratorss and challenge constructively. Strong analytical capability, with the ability to interpret complex information, identify themes and translate findings into practical action. Experience developing controls MI, governance reporting, maturity reporting or committee materials for senior audiences. Ability to design standards and methodologies while also driving practical implementation and delivery. Excellent written and verbal communication skills, including the ability to produce clear, defensible and executive-ready materials. Strong delivery discipline, with the ability to manage multiple priorities, dependencies and collaborator expectations.

Desirable Experience with MetricStream or equivalent GRC platforms. Experience supporting regulatory remediation programmes, Internal Audit reviews, second-line assurance activity or Section 166 reviews. Knowledge of benchmark administration, market infrastructure, financial market operations, index, data or analytics businesses. Professional qualifications in risk management, audit, governance, compliance or a related discipline . click apply for full job details