Risk Assurance Specialist

Enterprise Risk and Assurance Management Professional

Pepperstone is a transformative global fintech that empowers clients to take on the global markets with confidence.

Our team is comprised of curious and driven individuals who thrive in an environment that values progress, diversity, and results.

The Role

The Risk and Assurance Manager plays a pivotal role in supporting the strategic delivery of enterprise-wide risk and assurance agendas. Reporting to the Senior Manager - Enterprise Risk, this role leads key initiatives across enterprise risk, audit planning, business continuity, and ICT risk management.

This includes embedding enterprise risk frameworks aligned to the company's risk appetite and delegation framework, championing the integration of GRC platforms, and contributing to system optimisation efforts.

Key Responsibilities

• Lead initiatives to embed enterprise risk frameworks aligned to the company's risk appetite and delegation framework.
• Champion the integration of the GRC platform and contribute to system optimisation efforts.
• Drive improvements in risk reporting, analytics, and visualisation to support decision-making.
• Support the operationalisation of risk appetite statements and guide risk owners in embedding controls into business processes.

Assurance and Control Testing

• Lead the delivery of assurance activities including RCSA (risk control self-assessments), walkthroughs across Lines 1 and 2 and control testing.
• Adopt data insights to identify control gaps and improvement opportunities, collaborating with control owners to implement enhancements.
• Guide stakeholders on effective control design and foster a culture of continuous improvement.

Audit Planning and Remediation

• Assist in scoping the annual audit plans in line with enterprise risks and business priorities across licenses and entities.
• Support coordination of internal and external audit engagements, ensuring timely information flow between business units and auditors.
• Track audit actions and drive remediation plans with stakeholders.

Business Continuity Planning (BCP)

• Lead the update of Business Impact Analyses (BIA) and the implementation of business continuity testing.
• Support documentation and training programs to ensure readiness across global functions.
• Collaborate with business units/teams to assess disaster recovery capabilities and test outcomes.

Incident and Issue Management

• Lead cross-functional business process incident reviews, ensuring swift resolution and clear post-incident analysis.
• Foster a lessons-learned culture, supporting teams in identifying root causes and building preventative measures.
• Maintain oversight of the issue register and contribute to reporting on emerging risks and systemic themes.

About You

• Degree-qualified in Business, Finance, Risk, IT, or a related discipline.
• Professional certifications such as CRISC, CISA, or equivalent are desirable.
• 6-10 years of experience across enterprise risk, operational risk, or internal audit, preferably within financial services.
• Exposure to GRC platforms and experience supporting system rollouts or enhancements.
• Strong understanding of ICT and cyber risks, and associated control environments.
• Experience in coordinating business continuity and operational resilience programs.
• Collaborative mindset with demonstrated ability to influence across departments and regions.
• Structured thinker with strong written and verbal communication skills.
• Highly adaptable and able to manage multiple priorities in a fast-paced environment.
• Commercially savvy with a solutions-oriented approach.
• Curious, proactive, and committed to continuous learning and improvement.
• Strong integrity and alignment with our values.
• Experience working in financial markets or the retail OTC derivatives industry is desirable.
• Experience working across geographies and time zones is desirable.

This role is suited for a highly motivated professional who thrives in a fast-paced, agile environment and is passionate about enhancing risk maturity and resilience at scale.

---