Governance & Risk Oversight Manager, Legal & Compliance

Job Description

This senior role is at the heart of the Legal & Compliance COO’s office and directly supports the COO in leading the Group’s compliance risk management and control agenda.

Main tasks

This role provides structure, coordination, and oversight of all key compliance risk processes. As the COO’s delegate on selected committees and statutory governance forums, the holder of this role also collaborates with the Global & Swiss Head of PCC and the Global & Swiss Head of CIC to ensure risk alignment and manageable reporting on the compliance function.

Risk Framework Governance

- Serves as the global point of contact for all matters related to the Legal & Compliance risk framework. - Maintains and regularly reviews the taxonomy and classification of compliance risks to ensure alignment with the methodology and updates from the Global Risk function. - Coordinates the consistency of risk classification across the Compliance function and ensures traceability to the Group’s risk definitions. - Coordinates the periodic review of the Compliance Risk Appetite Statement in collaboration with the Global & Swiss Heads of PCC and Global & Swiss Heads of CIC (hereinafter “SMEs”) and Group Risk to ensure alignment with regulatory expectations and internal strategy. - Oversees the integration of risk topics (PCIA, KRMS, PII, monitoring results, and audit issues) into a coherent and documented compliance risk framework. - Ensures the availability of clear supporting documentation and acts as the custodian of methodology, definitions, and governance documents. - Participates in methodological discussions with Group Risk and contributes to the further development of risk identification and measurement standards.

Controls & Monitoring

- Designs and documents ZLOC regulatory controls for the Legal & Compliance function in coordination with the subject matter experts (SMEs). - Develops and maintains the monitoring plan, which covers all compliance risks, to ensure clarity regarding scope, methodology, and frequency. - Coordinates the execution of ZLOC monitoring activities with local teams and tracks their timely completion. - Consolidates findings from monitoring activities and thematic reviews to ensure the quality and consistency of results. - Assesses whether identified findings impact the function’s residual risk profile and ensures appropriate escalation. - Tracks corrective actions related to monitoring findings and validates their closure in coordination with control owners. - Ensures the documentation of controls, risk monitoring, metrics, findings, and audit trails. - Serves as the point of contact for external auditors and internal security teams regarding monitoring issues.

Compliance Risk Assessment (CRA)

- Leads the annual compliance risk assessment for all units. - Solicits all self-assessments and collaborates with stakeholders to ensure accurate risk assessments and appropriate mitigation measures. - Consolidates results and prepares reports and dashboards at the executive level. - Tracks and reports on the progress of CRA-related action plans. - Collaborates with subject matter experts (SMEs) to update the CRA in line with regulatory and internal risk frameworks. - Collaborates with the Head of LUC Transformation,