Manager-Control Management

Finance Control Management (FCM) is a comprehensive and integrated function that partners with Finance to identify, measure, assess, report, monitor and manage operational risk exposures. FCM provides risk and control expertise and works with Finance process owners to strengthen the control environment, support operational resilience and meet applicable enterprise, regulatory and legal expectations. Collaboration with Enterprise Control Management & Regulatory Governance (ECM&RG), subject matter experts, business partners and Control Management teams supports consistent execution of the Company s Operational Risk Framework, including risk assessment, internal control factors, governance, reporting and monitoring.

The Manager - Finance Control Management is a leadership role accountable for strengthening risk and control practices across the Finance Business Unit. The role contributes across multiple Control Management functions, including Issue and Operational Risk Event (ORE) management, risk identification, remediation, control testing, and governance. Team members are expected to be flexible and adaptable, supporting different areas within the remit as business needs and priorities evolve. The Manager may lead and develop a team of control management professionals, setting priorities, providing coaching and quality oversight, and fostering a culture of ownership, constructive challenge and continuous improvement.

• Experience in financial services and Finance-related risk and control environments, including engagement with second-line risk, Compliance and Internal Audit.

• Exposure to risk identification and assessment, control testing oversight, control ratings, GRC systems, governance committee reporting and process automation.

• Graduate degree; MBA or equivalent postgraduate qualification is an advantage.

• Lead with a broad understanding of Operational Risk Framework to support variety of roles in Finance Governance and Control including Issue Management, Risk identification and assessment, Control testing & monitoring activities, etc.

• Manage end-to-end Issue, ORE and Remediation management lifecycle, from identification, classification and impact assessment through root cause analysis, corrective action planning, escalation and sustainable closure, ensuring accurate records in the governance, risk and compliance (GRC) system.

• Partner with business areas and second-line risk teams (including Operational Risk Management, Compliance, Risk stripe SMEs), Internal Audit, RELM, etc.

• Lead risk identification (Risk ID), process risk and control assessment activities, control ratings and ongoing monitoring as applicable; connect emerging exposures, Issue trends and lessons learned to risk mitigation priorities.

• Partner with Finance owners to prioritize remediation, establish clear accountability and milestones, challenge root causes and corrective actions, resolve dependencies and escalate overdue or material risks to appropriate leadership forums.

• Provide oversight of remediation quality and closure effectiveness, including evidence review and targeted validation; identify repeat failures, systemic weaknesses and opportunities for durable control enhancements.

• Lead and, where required, perform risk-based control testing in alignment with enterprise standards, ensuring clear test procedures, robust evidence assessment, accurate documentation of results and timely escalation of exceptions. Collaborate with Control Owners to obtain evidence, clarify control design and execution, and resolve gaps; guide teams and stakeholders to deliver timely, consistent and high-quality testing, findings and remediation follow-up.

• Strengthen Finance risk governance through clear standards, robust documentation, effective challenge, timely escalation and alignment with enterprise policies, operational risk requirements and regulatory expectations.

• Lead, coach and develop team members, where applicable; set clear priorities and performance expectations, review the quality of deliverables, allocate resources effectively and build capability across risk, issue management and testing activities.