Operational Risk & Control Sr Lead - Remote at TransUnion

Team Overview

• As part of the Risk team, this role is responsible for independently planning, executing and documenting risk and control testing across TransUnion UK and Europe.
• The role applies specialist risk and control expertise to implement and maintain a programme to assess of control design and operating effectiveness.
• Outputs from the testing include identifying control weaknesses and non-adherence to policy or standards, and agreeing clear, evidence-based findings and proportionate remediation actions with the control and/or risk owner.
• The role helps provide assurance over the effectiveness of the first line control environment and supports consistent, high-quality risk and control management across the business.
• This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

• Lead risk-based control testing assignments across business processes and operational areas to assess whether controls are appropriately designed and operating effectively.
• Apply specialist judgement to determine appropriate testing scope, test plans, sampling methodology, evidence requirements and assessment criteria based on the nature, complexity and materiality of the relevant risks, controls, policies, standards and regulatory expectations.
• Execute and document control testing in a timely, consistent and evidence-led manner, maintaining accurate working papers, evidence trails and rationale to support testing conclusions.
• Provide subject-matter expertise on control design, operating effectiveness, and remediation expectations.
• Identify, document and validate control gaps, control failures, process weaknesses and instances of non-adherence to policy, standards or agreed procedures, exercising independent judgement when assessing risk impact and issue severity.
• Draft high-quality testing reports that clearly explain findings, risk impacts, root causes, ratings, evidence, agreed management actions and target completion dates.
• Engage constructively with control owners and relevant senior stakeholders to agree proportionate, evidence-based remediation actions that address root cause and reduce residual risk.
• Track and validate remediation activity, including reviewing evidence submitted by control owners to confirm actions have been completed effectively and escalating material concerns where required.
• Identify common themes, systemic control weaknesses and emerging risk indicators across testing activity, translating these into practical insight for management.
• Contribute to the ongoing development of control testing methodology, templates, quality standards, issue taxonomy and reporting processes.
• Support wider operational risk activities where required, including RCSA activity, risk register updates, thematic reviews, governance reporting and preparation for risk forums.
• Coach or support less experienced colleagues, where required, by sharing technical expertise, reviewing outputs or providing guidance on testing approach and evidence quality, without formal line-management accountability

Required Knowledge And Experiences

Core soft skills required

• Strong technical understanding of risk and control principles, including control design, operating effectiveness assessment, evidence standards, issue management and remediation validation.
• Practical experience planning and conducting control testing, assurance reviews, quality reviews, sampling exercises or thematic risk reviews.
• Ability to assess evidence objectively, challenge conclusions appropriately and produce well-supported testing outcomes.
• Strong written communication skills, with the ability to document findings clearly, concisely and in a way that supports effective management action and senior stakeholder understanding.
• Confident stakeholder management and influencing skills, including the ability to provide constructive challenge while maintaining effective working relationships.
• Excellent attention to detail and a high level of accuracy in all areas of work.
• Strong analytical and problem-solving skills, with the ability to identify themes, root causes, systemic control weaknesses and control improvement opportunities.
• Ability to translate detailed testing outcomes into clear management insight, themes, trends and practical recommendations.
• Well organised, able to manage competing priorities and deliver multiple complex testing assignments to agreed deadlines.
• Ability to work with a high degree of independence while escalating risks, blockers, judgement-based decisions and material findings appropriately.
• Previous experience (general and managerial)
• Relevant experience in operational risk, risk assurance, controls testing, internal audit, compliance monitoring, quality assurance or a related control function.
• Experience leading control testing or assurance reviews within a regulated business environment, including complex or cross-functional control areas.
• Experience developing testing plans, sampling approaches, evidence requirements, working papers and formal testing or assurance reports.
• Experience reviewing and challenging evidence provided by business teams to support control effectiveness conclusions or remediation closure.
• Experience contributing to testing methodology, quality standards, assurance frameworks or continuous improvement activity.
• Knowledge of risk and control frameworks, RCSA processes, issue management, root cause analysis and governance reporting.
• Working knowledge of Microsoft Office applications, particularly Excel, Word and PowerPoint.
• Financial Services experience, particularly within a UK-regulated business, is desirable.

End Date: October 7, 2026