Overview

Connecting clients to markets – and talent to opportunity.With 5,400+ employees and over 80,000 institutional, commercial, and payments clients, we operate from more than 80 offices spread across six continents. As a Fortune 100, Nasdaq-listed provider, we connect clients to the global markets – focusing on innovation, human connection, and providing world-class products and services to all types of investors.Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, StoneX Group is made up of four business segments that offer endless potential for progression and growth.

Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing and financial management to risk and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies.

The Enterprise Risk Management Lead supports the company’s Enterprise Risk Management (ERM) framework by executing core risk oversight activities across business lines and support functions. The role requires a high standard of professional competence, integrity, independence of judgment, and regulatory awareness, consistent with the Fitness & Probity Standards applicable to Controlled Functions. Foundational ORM processes, including Risk and Control Self‑Assessments (RCSAs), control design and operating effectiveness assessments, operational incident management, and Second Line of Defense (2LOD) control testing will also be required.

The role partners closely with First Line of Defense (1LOD) stakeholders to promote a strong risk culture, ensure consistent application of the ORM framework, and support regulatory expectations applicable to Irish and EMEA‑regulated entities.

Responsibilities

Act with honesty, integrity, and ethical conduct, consistent with the Central Bank of Ireland’s Fitness & Probity Standards
Demonstrate and maintain competence and capability appropriate to the role, including ongoing professional development
Comply with internal policies, regulatory requirements, and applicable Conduct Standards
Participate in the firm’s Fitness & Probity certification process and confirm ongoing compliance on a periodic basis
Promptly disclose any matter that could impact their fitness or probity status, in line with regulatory expectations
Support the execution of periodic RCSAs across assigned business lines and functions, including risk identification, control mapping, and residual risk assessment
Review and challenge risk statements, inherent risk ratings, control descriptions, and control effectiveness assessments for completeness and consistency
Assist with documentation, quality assurance, and consolidation of RCSA results for reporting and governance forums

Perform 2LOD control testing for in‑scope key controls, including design effectiveness and operating effectiveness testing, in line with established ORM procedures

Escalate material risk issues, control weaknesses, or inconsistencies to the PCF‑14 in a timely and transparent manner

Execute control testing using appropriate methods (e.g., inquiry, inspection, observation, re‑performance) and defined sample sizes
Document testing results, identify control gaps or weaknesses, and support issue validation and escalation

Support the operational incident and loss event process, including event intake, classification, root cause analysis, and impact assessment
Monitor incident remediation actions and follow up with control owners to ensure timely closure
Assist with trend analysis and thematic reporting of incidents and control issues

Prepare inputs for operational risk reporting, dashboards, and governance materials
Partner with 1LOD stakeholders to provide guidance on ORM expectations, control standards, and documentation practices
Support audits, regulatory exams, and internal reviews by providing ORM documentation and analysis as required

Support the PCF‑14 and ORM leadership in responding to internal audit, regulatory requests, and supervisory engagements with the Central Bank of Ireland

Qualifications

Solid understanding of operational risk concepts, risk and control frameworks, and the Three Lines of Defense model
Experience assessing control design and operating effectiveness
Familiarity with GRC tools, risk systems, or structured risk documentation processes is a plus
Strong attention to detail and documentation discipline
Clear written and verbal communication skills, with the ability to challenge constructively
Ability to manage multiple workstreams and meet deadlines
Collaborative mindset with the confidence to engage with senior stakeholders

Education / Certification Requirements:

Bachelor’s degree in Risk Management, Finance, Accounting, Business, Economics, or a related discipline

Experience

5-10 years’ experience in operational risk, enterprise risk, compliance, internal audit, or a related control function within a regulated financial services environment
Practical experience supporting RCSAs, control assessments, incident management, or 2LOD oversight

Working environment:

Hybrid

Head of Enterprise Risk Management - SDI

Job Description