Controls Governance Manager

General

Job Title:  Controls Governance Manager

Location:  Flexible

Division:  Risk & Compliance: Risk

Reports To:  Head of Controls Assurance

Key Relationships

• Head of Controls Assurance
• Head of Enterprise Risk Management
• Risk & Governance Leads in Business Areas

Risk Owners/ Managing Risk Owners

Compliance

• Head of Operational risk
• Head of Insurance risk
• Co-sourced Provider of “Controls Testing Services”

Job Summary

To strengthen first‑line accountability and provide independent second line assurance over key financial, operational, and regulatory controls, we have restructured our Controls and Compliance Assurance team. Reporting to the Head of Controls Assurance, the Controls Governance Manager will be responsible for defining and maintaining the controls testing methodology, overseeing governance and operational effectiveness, and ensuring high-quality reporting to senior stakeholders.

This role is central to establishing a robust, Solvency II‑aligned Internal Controls Framework for a large global. The successful candidate will act as the technical authority for controls testing, lead quality assurance activities, oversee performance of the outsourced testing services provider, and own the organisation’s master reporting suite (“single version of the truth”) for controls. Strong stakeholder engagement and deep expertise in controls best practice are essential.

Key Responsibilities

• Ownership of Key Controls Frameworks
• Develop, maintain, and continuously enhance the controls testing methodology, including sampling strategies, walkthrough standards, and evidence requirements.
• Ensure the methodology reflects best practice across the insurance sector and is updated in line with Solvency II (equivalent), PRA/FCA expectations, and emerging approaches such as automation and data‑enabled testing.
• Provide authoritative guidance to the Controls and Compliance Assurance team and first‑line controls owners on technical design and testing requirements.
• Oversight Support for the Outsourced Testing Services Provider
• Support the Head of Controls Assurance in governing the Outsourced Provider of Controls Testing Services.
• Establish and operate mechanisms to monitor supplier performance, including:
• contract management and SLA tracking
• technical quality reviews
• issue trends analysis
• performance dashboards and KPI monitoring
• Lead quality assurance reviews of all outsourced testing output, ensuring consistency, robustness and compliance with internal standards.

Lead Risk-Based Assurance Planning

• Lead the annual refresh of the Compliance Universe and the development of the thematic review and controls testing plans, applying a risk-based methodology to prioritise assurance activity.
• Coordinate with other assurance functions and business stakeholders to ensure the plans reflect key and emerging risks, regulatory priorities, business needs, and areas of potential assurance overlap or reliance.
• Present the proposed plans, together with the supporting risk assessment and rationale, to the relevant senior stakeholders and governance committees for review and approval.
• Maintain oversight of the approved plans throughout the year and quarterly recommend changes where developments in the organisation’s risk profile or business priorities require assurance coverage to be adjusted.
• Lead Production of Enterprise Controls Reporting
• Own and manage the organisation’s “single version of the truth” for controls reporting, integrating data from:
• the GRC system
• internal oversight activities
• outsourced testing results
• Produce high‑quality, timely reporting for senior management, including materials for ExCo, Audit Committee, and Risk & Regulatory Committee.
• Ensure reporting clearly articulates control weaknesses, themes, remediation progress, and emerging risk insights.

Stakeholder Relationship Management

• Own assigned relationships with key Risk & Governance Leads across major business units (e.g., Finance, Claims, Underwriting, Operations, Investments, etc.).
• Provide subject‑matter expertise to support business areas in strengthening control design and remediation of issues.
• Act as a trusted advisor, offering technical insight while maintaining appropriate second‑line challenge.

Controls Best Practice Advisory

• Serve as an internal expert on controls best practice, staying current with:
• developments in the insurance market
• Solvency II (equivalent) and relevant regulatory regimes and their governance requirements
• risk and controls assurance practices
• automation, data analytics and continuous controls monitoring
• Partner with the outsourced testing provider to bring fresh insights and thought leadership into the organisation.
• Management of the Controls Standard, Library & Hierarchy
• Maintain the controls standard, library and hierarchy within the GRC platform.
• Monitor first‑line use of the GRC tool and drive improvements in control descriptions, risk‑control mappings and documentation quality.
• Ensure consistent taxonomy and alignment with the broader Risk Management Framework.

Attestations

Coordinate and oversee the periodic controls attestation process, ensuring accuracy, consistency and completeness across all business areas.

Work closely with Controls and Compliance Assurance colleagues to support their interactions with their assigned business stakeholders.

People Development

• Lead the development of technical controls capability within the Controls and Compliance Assurance team.
• Design and deliver training for both the team and first‑line stakeholders, supporting broader organisational control maturity.
• Mentor colleagues and lead cross‑team activities, such as coordinated quality reviews of outsourced testing work.

Operational Management

Support operational responsibilities of the Controls and Compliance Assurance team, including budget planning, resource allocation, recruitment and process improvement.

Contribute to the effective running of governance forums, planning cycles and resourcing discussions.

Person Specification

Essential Criteria

• Deep subject matter expertise in internal control frameworks, control testing methodologies, and risk-based sampling techniques.
• Proven experience overseeing outsourced assurance providers, including quality assurance, contract performance management, service delivery monitoring, and SLA governance.
• Demonstrated ability to lead the development and execution of strategic, risk-based annual control testing plans and compliance thematic review programmes.
• Professional accounting qualification (ACA, ACCA, CPA, or equivalent).
• Excellent written and verbal communication skills, with the ability to engage and influence stakeholders at all levels

Technical Expertise

Proven ability to apply rigorous technical judgement to strengthen control environments.

At least 10+ years’ experience in controls, risk assurance, internal audit or similar roles within the insurance industry.

Strong understanding of

• Solvency II (equivalent) and other regulatory system of governance requirements
• PRA/FCA/ Lloyd’s regulatory expectations
• The three lines of defence model
• RCSA and operational risk frameworks
• GRC platforms and assurance tooling

Test Delivery Experience

Extensive experience leading design and operational effectiveness testing.

Demonstrated ability to review and challenge testing performed by both internal teams and third‑party providers.

Supplier Management

Experience monitoring outsourced assurance providers, including quality assurance, contract performance management, and SLA oversight.

Stakeholder Management

Able to engage senior leaders, build trusted relationships, and provide credible technical challenge.

Recognised as a “controls thought leader” capable of influencing business partners and leadership teams.

Presentation & Reporting Skills

Strong written and verbal communication skills, capable of distilling complex control issues for senior governance bodies.

Experience producing Committee‑level reporting.

Operational Management

Comfortable with operational responsibilities including budgeting, recruitment and planning.

Skilled at establishing and running efficient quality assurance processes.

People Leadership

Ability to coach, develop and coordinate others, even without direct line management.

Demonstrated capability to build technical competency across teams.

Qualifications (Preferred)

Certified Internal Auditor (CIA)

ACA, ACCA, CPA or equivalent

CRISC, CISA or similar

Financial Risk Manager (FRM)

Aptitude & Disposition

• Growth mindset and commitment to continuous improvement.
• Comfortable with ambiguity and able to shape new methodologies and frameworks.
• Strong interest in controls automation and data‑driven testing, with willingness to lead innovation initiatives.
• Detail‑oriented, rigorous and committed to maintaining high technical standards.

The Rewards

The opportunity to connect and build long-lasting professional relationships while advancing your career with a growing, dynamic organization

Attractive base compensation and discretionary performance related bonus

Competitively priced medical, dental and vision insurance

Company paid life, and short- and long-term disability insurance

401(k) plan with 5% company match and immediate vesting

22 days PTO (prorated for 1st calendar year of employment), 11 paid holidays per year, with the ability to flex the religious bank holidays to suit your religious beliefs

Up to $700 reimbursement for home office setup

Free in-office lunch, travel reimbursement for travel to office, and monthly lifestyle allowance

Up to 26 weeks of fully paid parental leave

Up to 2.5 days paid annually for volunteering at a charity of your choice

Salary for this role will be tailored to the successful individual’s location and experience. The expected compensation range for this position is to $139,500 per year plus discretionary annual bonus. You will be able to discuss your salary expectations should you be contacted about this role.

Don’t meet all the requirements? At Beazley we're committed to building a diverse, inclusive, and authentic workplace. If you’re excited about this role but your experience doesn’t perfectly align with every requirement and qualification in the job specification, we encourage you to apply anyway. You might just be the right candidate for this, or one of our other roles.