To lead independent second-line oversight of the Bank’s non-financial risks, with operational risk as the primary focus, including transaction execution, third-party and fraud risk oversight. The role establishes and embeds risk and control assessment, incident and loss management, GRC data governance, key risk indicators, business continuity and operational resilience, while challenging first-line control owners and reporting material exposures, trends and actions to Management and the Board. It coordinates specialist oversight of ICT, cyber, third-party, conduct, reputational, sustainability, legal and regulatory risks without displacing the mandates of Technology, Information Security, Compliance or Legal.