Head of Non-Financial Risk Control, Europe

Tasks and responsibilities

The role of Head of Non-Financial Risk Control Europe includes the following responsibilities:

• Oversee the monitoring of non-financial risks across all European units and ensure full alignment with Group frameworks and regulatory expectations
• Promote a strong risk culture and ensure that European units maintain operational resilience, technology and cyber readiness, as well as documented compliance with DORA requirements for ICT risks, incident management, testing, reporting, and third-party monitoring
• Assumed the role of Head of Non-Financial Risk Control for Europe and, locally, for Luxembourg, with full managerial responsibility for all NFRC employees in Luxembourg and European branches
• Lead the European implementation of global frameworks, including the Internal Control Framework (ICF), Operational Risk Framework, Third-Party Risk Management (TPRM) Framework, Technology Risk Framework, and resilience requirements
• Support in identifying, assessing, monitoring, and managing risks in accordance with the Group’s risk policy and defined risk appetite
• Ensuring compliance with Group policies and relevant European regulatory requirements, including efficient and transparent cooperation with supervisory authorities
• Establish clear and timely escalation procedures for exposures that exceed the risk appetite and ensure that remediation plans are credible, sustainable, and consistent with Group standards
• Coordinate with the group's internal audit function and serve as a trusted partner to ensure that audit findings are addressed in a timely manner
• Assistance with completing the annual Risk and Control Self-Assessment (RCSA) to ensure the effective identification of key risks, control gaps, and corrective actions across all European units
• Monitoring of European implementation of business continuity, resilience, third-party risk management (TPRM), technology and cyber monitoring, process risk assessments, control validation, and incident management

Requirements

The following requirements apply to this role:

• Academic degree (bachelor's or master's) in finance, risk management, business administration, or a related field
• 10+ years of experience in risk management, with significant experience in non-financial risks
• Proven leadership experience in a senior risk management role
• Strong knowledge of RCSA methods, control testing, incident management, and third-party monitoring
• Familiarity with risk management platforms (e.g., ServiceNow GRC, RSA Archer GRC, or equivalent) and a commitment to continuous process improvement
• Relevant industry certifications in compliance and/or risk management are preferred (e.g., IRM, FRM, ORISC)

Key competencies

The following key competencies are expected for this role:

• Strategic Thinking and Decision Making
• Strong leadership and influence skills
• A deep understanding of