Operational Risk and Compliance Manager

Working closely with Business Assurance, Procurement, Security and the Technology platforms, this role leads the control of the Operational Risk and Compliance Management practice throughout Technology from a centralised viewpoint, focusing on protecting the organisation from strategic risk, ensuring ongoing compliance and adherence to the agreed frameworks and standards.

There are 4 primary areas of responsibility for this role:

• Risk Management
• Supplier Management
• Service Continuity
• Audit and compliance

Here at ASOS, through our values of being Authentic, Brave and Creative, we have grown at a phenomenal rate since our inception. Our Technology platform teams have broken barriers in delivering cutting edge technology through agility and the autonomy to fail fast, learn and deliver greatness. With this growth comes great responsibility and this next phase of our journey looks to demonstrate and realise our fourth value of being Disciplined in how we continue to deliver new capability, how we operate and how we continue to grow as an enterprise level organisation. The Service Governance team has been formed as a pivotal part of this journey to enable our Tech teams to scale and deliver at velocity and to assure Tech continuity by providing appropriately balanced frameworks and through effective controls and measures.

You will:

• Design and own the roadmap for the implementation of a target operating model for the Operational Risk and Compliance team
• Ensure all relevant processes, tools, frameworks, standards, templates and blueprints remain relevant and inline with industry for the areas of responsibility, actively seeking continuous enhancements to these
• Establish effective governance and protocols, implementing and managing the full suite of risk management and ensuring that Technology governance policy and standards meet current internal policy, legislative, regulatory and industry codes of practice
• Plan and manage the implementation of Tech-wide processes and procedures for the identification, assessment, and management of risk inherent in the operation of business processes and of potential risks arising
• Perform risk assessments, impact analysis and accreditation across Technology, supporting teams to quantify and document probability of risk occurrence and impact
• Prioritise risks according to an agreed risk tolerance framework and manage this alignment appropriately
• Support the initial development of countermeasures and contingency plans for risk and compliance with platforms and wider relevant parties.
• Own and drive the Service Continuity capability through a risk-based approach ensuring Technology teams are operating in accordance with the Service Continuity framework and disaster recovery planning and testing is taking place as per an agreed schedule with relevant stakeholders
• Own and drive the Supplier Management framework through a risk based approach ensuring 3rd party contracts are fit for purpose and adequate reporting mechanisms are established and supporting Tech teams in ensuring 3rd parties are managed in accordance with the centralized governance framework,
• Ensure the requirements for all controls and measurements are met using KPI analysis to ensure risks do not convert to live issues and reporting on a range of KPIs in conjunction with the Insight and Analytics team
• Principally liaise with business teams and regulatory authorities regarding Technology compliance
• Identify and implement appropriate continuous improvements, focusing on synergies with Security to support effective risk, compliance and security management under one forward thinking umbrella capability