Enterprise Risk & Compliance Specialist

Designed and implemented an enterprise-wide risk management framework for a high-growth technology platform, reducing operational risk exposure by 30% through improved risk identification, scoring, and mitigation workflows. Optimised the organisational risk register and aligned strategic and operational risks with executive reporting and Risk Committee governance requirements.

Integrated risk management practices into product and engineering delivery cycles, embedding risk appetite considerations into roadmap planning and release processes. Established centralised incident and loss-event reporting, led third-party and vendor risk programme development, administered OneTrust and Whistic, and produced Power BI and Tableau dashboards for senior decision-making.

Performed risk assessments across IT systems, business processes, and third-party vendors, producing detailed reports to support policy decisions, remediation planning, and control improvements. Monitored operational risk exposures and reported mitigation effectiveness to senior stakeholders.

Partnered with engineering and product teams to automate manual risk and compliance processes, improving accuracy, traceability, and audit readiness. Developed and delivered risk awareness training and supported data protection policies and risk tooling aligned with ISO 27001 and wider information security requirements.

Co-founded and actively builds a GRC software product for technology companies, leading business documentation, technical documentation, and system design for the platform.

Translates real-world risk and compliance challenges into scalable product features, solution architecture, and user workflows based on direct practitioner experience.

Monitored risk exposure across digital platform operations and implemented targeted mitigation strategies, reducing fraud-related loss rates from 30% to 2% through systematic controls and improved detection processes.

Applied BPMN to map platform workflows, identify inefficiencies, and redesign risk and fraud-detection processes for stronger operational resilience. Collaborated with product, engineering, and commercial stakeholders to align risk strategies with business objectives and growth targets.

Conducted structured risk assessments and maintained Risk and Control Self-Assessment databases, ensuring accurate records for internal governance and external audit purposes.

Applied business process management techniques to streamline risk assessment workflows, redesign compliance reporting, and document future-state controls aligned with regulatory requirements. Supported risk management tooling implementation and produced risk reports and dashboards for stakeholder engagement and mitigation decisions.