SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Timeline is a fintech company focused on retirement planning and investment solutions, operating as a remote-first organization with team members across 13+ countries. The company provides Platform, MPS, and financial planning solutions designed to disrupt traditional financial services by reducing costs and inefficiencies for financial advisers while improving long-term investment returns for clients.
You will join the Risk and Compliance team as an experienced Risk Manager, reporting directly to the Chief Risk and Compliance Officer. Operating in the second line of defence, you will be responsible for embedding and maintaining the enterprise risk management framework, strengthening Key Risk Indicator (KRI) coverage, enhancing operational resilience, and overseeing third-party risk management. This is a permanent role requiring someone who can operate at pace without sacrificing rigour while building enduring risk capabilities.
Key Responsibilities:
Risk Framework: Maintain top-down and bottom-up risk assessments and registers in collaboration with business stakeholders. Support maintenance and Board approval of risk appetite statements. Review, enhance, calibrate, and maintain KRIs across all business areas, ensuring thresholds align with risk appetite.
Third Party and Operational Risk: Implement third-party risk frameworks and oversight appropriate to the company's scale and complexity. Support quarterly risk assessment cycles across business units. Maintain and enhance incident investigation processes, ensuring timely escalation, root cause analysis, action closure, and reporting.
Operational Resilience and Business Continuity: Review and maintain the Business Continuity Plan and Disaster Recovery arrangements reflecting Timeline's operating model and platform. Support annual operational resilience self-assessments, including mapping important business services, setting impact tolerances, and testing arrangements. Coordinate scenario testing of BCP and DR arrangements, document outcomes, and track remediation. Assess operational resilience implications of new business initiatives and platform migrations, providing second-line input to project governance.
Governance and Reporting: Prepare risk-focused board and committee papers, including standing Risk and Compliance Committee reports. Support the ICARA process, including scenario stress testing and wind-down planning, in coordination with Finance and the Chief Risk and Compliance Officer. Contribute to governance embedding and support Terms of Reference development for risk-related committees. Take ongoing ownership of the risk management framework.
Stakeholder Engagement: Collaborate with Senior Leadership Team and first-line business owners to embed risk processes. Maintain clear documentation of all aspects of the risk framework.
Requirements:
Core Knowledge & Experience:
- 6+ years' experience in a risk management role within an FCA-regulated investment firm
- Demonstrable experience designing and embedding enterprise risk management frameworks, including risk registers, KRIs, and risk appetite statements
- Strong working knowledge of FCA rules including SYSC, PRIN, and prudential requirements (ICARA/MIFIDPRU)
- Hands-on experience with operational resilience frameworks, including important business services mapping, impact tolerance-setting, and BCP/DR maintenance and testing
- Familiarity with Consumer Duty, SM&CR, and third-party risk management
- Experience working across second-line functions with first-line business owners
- Excellent written communication skills with ability to prepare board-level documentation
- Proven ability to work independently and at pace in a fast-paced, evolving environment
Ideal Knowledge & Experience:
- Experience in a discretionary fund manager, MPS provider, or investment platform business
- Familiarity with third-party oversight frameworks
- Experience using GRC platforms or data tools to support risk reporting
- Professional qualifications (e.g., IRM, CISI) desirable but not essential
