Operational Risk Analyst Manager

Role Purpose & Context

Role Summary

The Operational Risk Analyst Manager is here to build, lead, and run our operational risk management programme for a key part of the business. You'll manage a team of dedicated analysts, making sure they're not just ticking boxes, but really digging into what could go wrong and helping put solid controls in place. This role sits right at the heart of our operations, working closely with site leadership, engineering, and legal teams to make sure our processes are safe, compliant, and actually work in practice. When you do this job well, we avoid major incidents, dodge hefty regulatory fines, and protect our people and our reputation. If it's not done right, well, the consequences can be pretty severe – think serious injuries, environmental damage, or a huge hit to our bottom line. The tricky part is balancing the need for robust controls with the operational realities of a busy business. The reward, though, is seeing your team thrive, knowing you've made a tangible difference to safety, and building a genuinely resilient organisation.

Reporting Structure

• Reports to: Director of Operational Risk & Compliance
• Direct reports: Roughly 3-8 direct reports, potentially including Lead Analysts.
• Matrix relationships: Principal Operational Risk Advisor, Senior Manager, Risk & Compliance, Head of Operational Risk (CQHS),

Key Stakeholders

Internal:

• VPs and Directors of Operations (for your assigned business unit/site)
• Legal & Regulatory Affairs team
• Site Leadership and Plant Managers
• Engineering and Maintenance teams
• Head of HR and People Operations
• Internal Audit team

External:

• Regulatory bodies (e.g., HSE, Environment Agency)
• External auditors and assurance providers
• Industry associations and peer groups
• Key suppliers and contractors

Organisational Impact

Scope: This role directly impacts our operational resilience, regulatory standing, and ultimately, our ability to operate safely and profitably. You'll be accountable for reducing our exposure to significant operational risks, protecting our employees, assets, and the environment. Your work ensures we maintain our 'licence to operate' and build trust with our customers and the wider community. Get it right, and you're saving us millions and preventing harm.

Performance Metrics

Quantitative Metrics

1. Metric: Lost Time Injury Frequency Rate (LTIFR) Reduction
2. Desc: The number of lost time injuries per 100,000 hours worked within your managed business unit or site.
3. Target: Achieve a 10-15% reduction year-on-year for your assigned scope.
4. Freq: Monthly, reported quarterly.
5. Example: If the site's LTIFR was 0.8 last year, you'd aim for 0.68-0.72 this year. This isn't just a number; it means fewer people getting seriously hurt.
6. Metric: Regulatory Fines & Notices of Violation
7. Desc: The total value of fines and the number of formal notices received from regulatory bodies for your area of responsibility.
8. Target: Zero significant fines; less than 2 minor notices per year.
9. Freq: Quarterly.
10. Example: Avoiding a £50,000 fine for an environmental breach or successfully challenging a notice from the HSE counts as a big win here.
11. Metric: Risk Control Effectiveness Score
12. Desc: An aggregated score from audits and control testing, measuring how well our identified risk controls are actually working in practice.
13. Target: Improve average control effectiveness score by 5% year-on-year.
14. Freq: Bi-annually.
15. Example: If the average score for critical safety controls was 75%, you'd push it to 80% by identifying weaknesses and implementing improvements.
16. Metric: Team Incident Investigation Closure Rate
17. Desc: The percentage of high-priority incident investigations completed and closed with agreed actions within defined timelines by your team.
18. Target: Maintain 95%+ closure rate for high-priority incidents within 30 days.
19. Freq: Monthly.
20. Example: Your team consistently closes 19 out of 20 serious incident reports on time, ensuring lessons are learned quickly.

Qualitative Metrics

1. Metric: Stakeholder Confidence & Partnership
2. Desc: How well you and your team are seen as trusted advisors, not just 'compliance police', by operational leaders.
3. Evidence: Operational VPs proactively seek your advice on new projects or changes. Your team's recommendations are consistently adopted. You're invited to strategic planning meetings, not just incident reviews. Feedback from 360-degree reviews will reflect this.
4. Metric: Team Development & Engagement
5. Desc: The growth and engagement of your direct reports, ensuring they're skilled, motivated, and progressing.
6. Evidence: Your team members achieve their development goals. You've successfully mentored junior analysts into more senior roles. Team retention is high, and feedback from engagement surveys for your team is positive. They feel supported and challenged.
7. Metric: Proactive Risk Identification
8. Desc: Your ability to spot emerging risks or systemic weaknesses before they lead to incidents.
9. Evidence: You're presenting new, significant risks to leadership that they hadn't considered. Your team's trend analysis identifies precursors that lead to preventative action. You challenge the status quo and push for continuous improvement, not just reactive fixes.

Primary Traits

• Trait: Forensically Detail-Oriented (at scale)
• Manifestation: You're the one who can review a complex incident report, cross-reference it with a year's worth of maintenance logs, and spot the one missing calibration record that points to a systemic issue. You don't just see the trees; you see the one rotten root in the forest. You challenge your team to go beyond the obvious, ensuring every 'i' is dotted and 't' is crossed in their investigations and reports, because you know the devil is always in the detail. You'll catch the subtle wording change in a new regulation that could cost us £100K.
• Benefit: At this level, a single overlooked detail can lead to a major regulatory breach, a significant incident, or a failed audit. Your ability to instill this rigour in your team and apply it to complex, multi-faceted problems is critical. It prevents 'normalization of deviance' from creeping into our systems and ensures our defence layers are truly robust.
• Trait: Systematic Scepticism (with a purpose)
• Manifestation: When a site manager tells you 'we've always done it this way and it's fine,' you'll politely ask for the evidence, the risk assessment, and the control effectiveness data. You're not afraid to question established practices or challenge assumptions, even from senior leaders. You push your team to dig deeper than 'human error' to find the true systemic causes of incidents. This isn't about being negative; it's about being relentlessly curious and objective.
• Benefit: This trait is our primary defence against complacency and 'pencil-whipping' at an organisational level. You're building a culture where questioning is encouraged, and where we constantly strive to improve, rather than just accepting the status quo. It helps us uncover hidden risks and ensures our procedures actually reflect reality, not just what's written on paper. Without this, we're flying blind.
• Trait: Unflappable Under Pressure (leading the charge)
• Manifestation: In the immediate aftermath of a serious incident, you're the calm voice on the phone, methodically guiding your team to gather facts, secure the scene, and manage communications, even when the CEO is breathing down your neck. You can present uncomfortable truths about operational failures to the executive team without getting defensive, focusing on solutions rather than blame. You're able to de-escalate tense situations during investigations, building trust and getting to the bottom of things when emotions are running high.
• Benefit: In a crisis, you need to be a beacon of stability and objective analysis for your team and the wider business. Your calm, measured behaviour builds confidence, allows for effective, fact-based investigations, and ensures we make rational decisions under extreme stress. Losing your cool means losing credibility, and that's something we can't afford when dealing with safety and compliance.

Supporting Traits

• Trait: Inquisitive Leadership
• Desc: A genuine curiosity to understand the 'why' behind complex operational failures, and the ability to foster this curiosity within your team, pushing them to look beyond surface-level symptoms.
• Trait: Methodical Programme Builder
• Desc: A highly structured, process-driven approach to designing and implementing risk management programmes, ensuring consistency, scalability, and thoroughness across your area of responsibility.
• Trait: Diplomatic Influencer
• Desc: The ability to interview people across all levels, deliver critical feedback, and drive change within operational teams without creating adversarial relationships. You're a partner, not an adversary.
• Trait: Resilient Change Agent
• Desc: Can handle significant pushback from operations, budget constraints, and political challenges, maintaining objectivity and persistence to drive necessary risk reductions and cultural shifts.

Primary Motivators

1. Motivator: Preventing Harm & Protecting People
2. Daily: You get genuine satisfaction from knowing your work directly contributes to a safer workplace, fewer injuries, and a healthier environment. Seeing a new control prevent a potential incident is a huge win for you. This isn't just a job; it's a mission.
3. Motivator: Building & Mentoring a High-Performing Team
4. Daily: You love seeing your team members grow, develop their skills, and take on bigger challenges. You're energised by coaching, providing feedback, and creating an environment where analysts can do their best work and feel supported.
5. Motivator: Strategic Problem Solving & System Improvement
6. Daily: You thrive on dissecting complex operational failures, identifying systemic weaknesses, and designing robust, long-term solutions that genuinely improve the business's resilience. You're not content with quick fixes; you want to fix the underlying problem.

Potential Demotivators

Honestly, this role isn't for everyone. You'll spend a fair bit of time battling the 'we've always done it this way' mentality. There will be moments where you'll present a rock-solid case for a safety improvement, only to have it deprioritised due to budget or production pressures. You'll sometimes feel like the 'compliance police,' even when you're trying to be a partner. If you need every single one of your recommendations to be implemented immediately and without question, you'll find this frustrating. The reality is messier than the job posting suggests, and sometimes, you're playing the long game for change.

Common Frustrations

1. The 'Garbage In, Garbage Out' Problem: Your team will still get incomplete or vague incident reports, meaning you'll spend valuable time chasing basic facts.
2. Production vs. Safety Tension: Constantly navigating the inherent conflict where operations managers are bonused on output, and your recommendations might mean slowing things down or stopping a line.
3. Proving the Negative: It's incredibly difficult to quantify the value and ROI of an incident that *you prevented* from happening. Your biggest successes are often invisible.
4. Recommendation Fatigue: Seeing similar root causes and making the same recommendations for different incidents, only to see them languish as 'accepted risks' due to budget or political will.
5. Legacy System Hell (still): While you'll influence new systems, you'll still inherit and have to work with some truly ancient data sources and systems.

What Role Doesn't Offer

1. A quiet, purely analytical role with no people management.
2. Guaranteed immediate implementation of every recommendation.
3. A role where you're never challenged or questioned by operational teams.
4. A completely predictable day-to-day routine; urgent issues will always pop up.

ADHD Positives

1. The fast-paced, incident-driven nature of some aspects of the role can be highly engaging for those with ADHD, providing novel challenges and opportunities for hyperfocus during investigations.
2. The need to quickly pivot between different tasks (e.g., managing a team, reviewing reports, engaging stakeholders) can suit individuals who thrive on variety and multi-tasking.
3. The strategic problem-solving and systemic thinking required to identify root causes can be a strong fit for creative and divergent thinkers.

ADHD Challenges and Accommodations

1. Maintaining focus on long-term, strategic programme development amidst daily operational fires can be challenging. We can support with structured planning sessions, clear milestone tracking, and delegating routine tasks where possible.
2. The extensive documentation and reporting requirements might feel tedious. We can provide templates, AI tools for drafting (see Section 4B), and support for breaking down large writing tasks.
3. Managing a team requires consistent attention to individual development plans and regular check-ins. We can help with calendar blocking, reminder systems, and clear expectations for meeting structures.

Dyslexia Positives

1. The role's emphasis on visual tools like BowTie analysis, process mapping, and data visualisation (Power BI/Tableau) can be a significant strength for dyslexic thinkers.
2. Strong conceptual understanding and pattern recognition, often associated with dyslexia, are highly valuable for identifying systemic risks and designing control frameworks.
3. The ability to think holistically and connect disparate pieces of information is crucial for complex root cause analysis.

Dyslexia Challenges and Accommodations

1. The volume of written reports, regulatory documents, and policy drafting can be demanding. We encourage the use of assistive technologies (e.g., text-to-speech, dictation software), offer proofreading support, and provide clear templates.
2. Ensuring accuracy in detailed written communications and data entry is critical. We can implement double-checking processes, use AI for initial drafting and grammar checks, and provide ample time for review.
3. Presentations to senior leadership require clear, concise communication. We can support with presentation coaching, graphic design assistance, and rehearsal opportunities.

Autism Positives

1. The methodical, logical, and systematic nature of risk assessment, control design, and incident investigation can be a natural fit for autistic individuals who excel in structured problem-solving.
2. A strong focus on facts, data, and objective analysis, rather than subjective interpretations, aligns well with the requirements of this role.
3. The ability to identify patterns, inconsistencies, and deviations from established procedures is a core strength that directly supports risk identification and control effectiveness.

Autism Challenges and Accommodations

1. Navigating complex organisational politics, unspoken expectations, and nuanced stakeholder relationships can be challenging. We can provide explicit guidance on communication styles, offer coaching for stakeholder engagement, and act as a sounding board for difficult conversations.
2. Leading a team involves significant social interaction, emotional intelligence, and adapting communication for different individuals. We can support with structured one-on-ones, clear communication frameworks, and leadership development that focuses on practical, actionable strategies.
3. Unexpected changes or urgent incidents can disrupt routines. We aim to provide as much advance notice as possible, clearly communicate priorities, and offer structured support during high-pressure situations.

Key Responsibilities

Experience Levels Responsibilities

1. Level: Operational Risk Analyst Manager (L5)
2. Responsibilities: Lead, mentor, and develop a team of 3-8 Operational Risk Analysts, setting clear objectives and supporting their professional growth. This means regular 1-to-1s, performance reviews, and coaching them through tricky investigations.
3. Design, implement, and continuously improve the operational risk management framework for your assigned business unit or major site. You'll own the 'how' we identify, assess, control, and monitor risks in that area.
4. Oversee and, where necessary, personally lead complex, high-severity incident investigations, ensuring root causes are identified, and robust corrective and preventative actions are put in place. This often means challenging initial assumptions.
5. Act as the primary point of contact and subject matter expert for regulatory engagements related to operational risk within your scope. You'll face off with auditors and regulators, presenting our programmes and defending our positions.
6. Develop and manage the budget for your team and risk programmes, making sure we're allocating resources effectively to address the most critical risks. You'll need to justify your spending and show the ROI.
7. Drive the continuous improvement of KRI/KPI development and reporting, ensuring we have meaningful leading indicators that give us early warning of emerging risks. This isn't just about reporting; it's about making the data actionable.
8. Influence senior operational leaders to embed risk management into their day-to-day decision-making, moving us from reactive compliance to proactive risk culture. This takes patience, diplomacy, and solid data.
9. Supervision: You'll report to the Director of Operational Risk & Compliance with monthly strategic alignment meetings. On a day-to-day basis, you're fully autonomous within your defined scope, expected to manage your team and programmes independently. You'll consult with the Director on major strategic shifts or significant budget overruns.
10. Decision: You have full authority over the design and implementation of risk programmes within your assigned business unit/site, including methodology and tool selection. You can approve expenditures up to £100,000 for risk-related projects or training. You have hiring and firing authority for your direct reports. Responses to regulatory inquiries within established guidelines are your call, but you'll always keep Legal informed. Strategic changes impacting the wider organisation or budgets exceeding £100,000 require consultation and approval from the Director.
11. Success: Success looks like a demonstrable reduction in incidents and regulatory non-compliances within your scope, a highly engaged and developing team, and being seen as an indispensable strategic partner by operational leadership. You'll have built robust, scalable risk programmes that genuinely protect the business.

Decision-Making Authority

• Type: Incident Investigation Scope & Lead
• Entry: Follows pre-defined investigation protocols; escalates any deviation to supervisor.
• Mid: Independently defines scope for routine incidents; consults manager on complex cases.
• Senior: Leads complex, high-severity investigations; defines scope and resources; makes recommendations to senior leadership. For multi-site or high-profile incidents, you'll be the one making the call on who leads what.
• Type: Risk Control Implementation
• Entry: Executes specific control implementation tasks as directed by a senior analyst.
• Mid: Proposes and implements routine control improvements within existing frameworks; escalates non-standard solutions.
• Senior: Designs and oversees the implementation of new control frameworks and significant process changes for a business unit. You'll have the budget and authority to make these happen, often needing to get buy-in from operational VPs.
• Type: Team Management & Development
• Entry: No direct reports; focuses on personal development goals.
• Mid: Offers informal guidance to new joiners; focuses on personal development.
• Senior: Manages a team of analysts, including performance reviews, coaching, and career development. You're accountable for their growth and output, and you'll have the final say on their individual development plans.
• Type: Budget Allocation (Risk Programmes)
• Entry: No budget authority; reports expenses.
• Mid: Recommends small purchases (£1-5K) for tools/training; requires manager approval.
• Senior: Manages a programme budget up to £100,000, allocating funds for training, tools, and external support. You'll be responsible for ensuring value for money and reporting on spend.

Competency Requirements

Foundation Skills (Transferable)

Beyond the technical know-how, this role demands a strong set of foundational skills. You're leading a team and influencing senior leaders, so how you communicate, solve problems, and adapt is just as important as your risk expertise.

• Category: Communication & Influence
• Skills: Executive Presentation: The ability to distil complex risk information into clear, concise, and impactful presentations for C-suite and board-level audiences. This means knowing what matters to them and cutting through the noise.
• Negotiation & Persuasion: Skill in influencing operational leaders to adopt risk controls or change behaviours, often when it conflicts with production targets. It's about building consensus and demonstrating value, not just dictating.
• Team Communication & Coaching: Clearly communicating objectives, providing constructive feedback, and fostering an open dialogue within your team to ensure everyone is aligned and supported.
• Category: Problem-Solving & Strategic Thinking
• Skills: Systemic Problem Solving: The ability to look beyond immediate causes and identify deep-seated, systemic issues that contribute to operational risks. This often involves connecting disparate pieces of information across the organisation.
• Strategic Risk Framework Design: Thinking critically about how risk management programmes fit into the broader business strategy, designing frameworks that are scalable, effective, and tailored to specific business units.
• Decision Making Under Ambiguity: Making sound, evidence-based decisions when information is incomplete or conflicting, especially during incident response or when assessing emerging risks.
• Category: Leadership & Adaptability
• Skills: Team Leadership & Development: The ability to inspire, motivate, and develop a team of risk professionals, fostering a culture of continuous learning, accountability, and psychological safety.
• Change Management Leadership: Guiding your team and stakeholders through changes in risk frameworks, regulatory requirements, or operational processes, managing resistance and ensuring smooth transitions.
• Adaptability & Resilience: Thriving in an environment where priorities can shift rapidly due to incidents, new regulations, or business changes. You'll need to stay calm and focused when plans get derailed.

Functional Skills (Role-Specific Technical)

Here's where your deep expertise in operational risk really shines. You'll need a solid grasp of methodologies, a command of our tools, and a comprehensive understanding of the industry.

Technical Competencies

• Skill: Advanced Root Cause Analysis (RCA) & Investigative Techniques
• Desc: Expert application of structured investigative techniques (e.g., 5 Whys, Fishbone/Ishikawa, Fault Tree Analysis, SCAT) to complex, multi-factor incidents, ensuring systemic failures are identified and addressed. You'll be teaching your team these methods.
• Level: Expert
• Skill: Enterprise Risk Assessment & Control Frameworks
• Desc: Deep proficiency in qualitative and quantitative risk assessment methodologies (e.g., BowTie Analysis, FMEA, HAZOP) and the ability to design and implement control frameworks like ISO 31000, COSO, and industry-specific standards (e.g., ISO 45001, ISO 14001) across a business unit.
• Level: Expert
• Skill: Strategic Control Effectiveness Testing & Assurance
• Desc: Designing and overseeing comprehensive programmes for testing the effectiveness of critical risk controls (e.g., safety interlocks, permit-to-work, quality checks), ensuring they are present, properly designed, and operating effectively at scale. This includes defining audit scope and methodology.
• Level: Advanced
• Skill: KRI/KPI Programme Development & Management
• Desc: The ability to define, develop, and manage a portfolio of Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) that provide a forward-looking view of the risk landscape for your business unit, translating data into actionable insights for leadership.
• Level: Advanced
• Skill: Internal Audit & Assurance Governance
• Desc: Understanding and applying principles from standards like ISO 19011 to plan, conduct, and report on internal audits of CQHS processes, ensuring objectivity and evidence-based conclusions, and overseeing your team's audit activities.
• Level: Advanced

Digital Tools

• Tool: EHS/GRC Platforms (e.g., Intelex, Enablon, Sphera, Cority)
• Level: Strategic
• Usage: Leading platform selection/RFP processes, defining enterprise data governance for risk data, overseeing integration with other systems (e.g., ERP, HRIS) to ensure seamless data flow and reporting for your business unit.
• Tool: Data Visualization (e.g., Power BI, Tableau)
• Level: Architect
• Usage: Governing the BI environment for risk reporting, setting data visualisation standards for your team, and presenting complex risk insights to executive leadership and potentially the board using compelling dashboards.
• Tool: Microsoft Excel (Advanced Modelling)
• Level: Strategic
• Usage: Approving and validating complex risk quantification models developed by your team, understanding their limitations and assumptions, and using it for high-level strategic analysis and scenario planning.
• Tool: Collaboration & Document Control (e.g., SharePoint, MS Teams, Confluence)
• Level: Strategic
• Usage: Setting the enterprise-wide strategy for knowledge management and controlled documentation for compliance purposes within your scope, ensuring efficient information sharing and version control for critical policies and procedures.
• Tool: ERP Systems (e.g., SAP S/4HANA (PM/QM modules), Oracle ERP Cloud)
• Level: Strategic
• Usage: Influencing ERP configuration to ensure critical CQHS data fields are captured effectively at the source, understanding how operational data feeds into risk analysis, and identifying opportunities for data integration.
• Tool: Regulatory Intelligence (e.g., Wolters Kluwer, Compliance.ai)
• Level: Strategic
• Usage: Interpreting the business impact of pending legislation, briefing executive leadership on necessary strategic pivots, and ensuring your team proactively tracks and responds to regulatory changes affecting your business unit.

Industry Knowledge

• Area: Industry-Specific Operational Context
• Desc: A deep understanding of the specific operational processes, hazards, and typical risk profiles within our industry sector (e.g., manufacturing, logistics, energy). You'll know the common pitfalls and best practices.
• Area: Organisational Psychology & Safety Culture
• Desc: Knowledge of how organisational culture, human factors, and behavioural science influence safety performance and risk-taking. You'll use this to drive cultural change and improve reporting.
• Area: Business Continuity & Crisis Management
• Desc: Understanding the principles of business continuity planning and crisis response, and how operational risk management feeds into these broader resilience efforts. You'll be part of the crisis team when things go wrong.

Regulatory Compliance Regulations

• Reg: Health and Safety at Work etc. Act 1974 (HASAWA)
• Usage: Ensuring our operational risk programmes and controls are fully compliant with HASAWA and associated regulations (e.g., RIDDOR, COSHH, LOLER, PUWER). You'll interpret complex legal requirements and translate them into actionable policies for your business unit.
• Reg: Environmental Permitting Regulations (EPR)
• Usage: Overseeing compliance with environmental permits, managing environmental risk assessments, and ensuring your team understands and monitors relevant environmental legislation. This is about preventing pollution and managing our environmental footprint.
• Reg: ISO 45001 (Occupational Health & Safety Management Systems)
• Usage: Leading the implementation and maintenance of our ISO 45001-aligned management system within your scope, ensuring certification readiness and continuous improvement. You'll be responsible for the effectiveness of this system.
• Reg: ISO 14001 (Environmental Management Systems)
• Usage: Guiding the implementation and maintenance of our ISO 14001-aligned environmental management system, driving performance improvements and ensuring regulatory compliance.

Essential Prerequisites

• Proven experience (typically 5-8 years) as a Senior Operational Risk Analyst or Lead Analyst, demonstrating the ability to lead complex investigations and manage significant risk workstreams independently.
• Experience managing or mentoring junior team members, with a track record of developing talent and fostering a collaborative environment.
• Demonstrable experience in designing, implementing, and managing risk control frameworks for a specific operational area or business unit.
• A strong track record of successfully influencing senior stakeholders and driving positive change in a complex operational environment.
• The ability to interpret complex regulatory requirements and translate them into practical, actionable risk management strategies.

Career Pathway Context

We're looking for someone who has already proven they can operate at a senior individual contributor or lead level, and who is now ready to step up and take full ownership of a team and a significant part of our risk programme. You should have a clear understanding of what it takes to drive change and manage people in a Compliance, Quality, Health & Safety context.

Qualifications & Credentials

Emerging Foundation Skills

• Skill: AI-Driven Risk Insights & Validation
• Why: AI is rapidly changing how we identify, analyse, and predict risks. Competitors are already using advanced analytics to spot patterns we can't see manually. Your role will shift from purely manual analysis to validating, interpreting, and strategically applying AI-generated insights.
• Concepts: [{'concept_name': 'Explainable AI (XAI) in Risk', 'description': 'Understanding how AI models arrive at their conclusions, especially for risk prediction, to ensure transparency and trust with regulators and operational teams.'}, {'concept_name': 'Prompt Engineering for Risk Scenarios', 'description': 'Crafting effective prompts for LLMs to generate realistic risk scenarios, identify control gaps, or summarise complex regulatory changes efficiently.'}, {'concept_name': 'AI Model Governance & Bias Detection', 'description': 'Establishing frameworks to ensure AI models used in risk management are fair, unbiased, and compliant with ethical guidelines and data privacy regulations.'}]
• Prepare: This quarter: Actively experiment with AI tools (e.g., ChatGPT, Claude) for summarising reports, drafting communications, and brainstorming risk scenarios.
• Next 6 months: Complete an online course on AI ethics or responsible AI development, focusing on bias and transparency.
• Next 12 months: Lead a pilot project within your team to integrate an AI-powered risk analysis tool, focusing on validation and impact assessment.
• QuickWin: Start using AI to draft initial incident summaries or policy updates. It's a low-risk way to get comfortable with the technology and see immediate time savings.
• Skill: Climate & ESG Risk Integration
• Why: Environmental, Social, and Governance (ESG) factors, especially climate change, are no longer just 'nice-to-haves' but critical operational risks. Regulators, investors, and customers demand robust management of these areas. You'll need to integrate these into our core risk framework.
• Concepts: [{'concept_name': 'TCFD (Task Force on Climate-related Financial Disclosures)', 'description': 'Understanding the framework for reporting climate-related financial risks and opportunities, and how this impacts operational risk assessments.'}, {'concept_name': 'Physical vs. Transition Risks', 'description': 'Differentiating between the direct impacts of climate change (e.g., extreme weather) and the risks associated with transitioning to a low-carbon economy (e.g., policy changes, market shifts).'}, {'concept_name': 'Supply Chain ESG Risk', 'description': 'Assessing and managing the environmental and social risks embedded within our supply chain, which can have significant operational and reputational impacts.'}]
• Prepare: This quarter: Read up on TCFD recommendations and how they apply to our industry. Identify key physical and transition risks relevant to our operations.
• Next 6 months: Collaborate with our Sustainability or Corporate Affairs team to understand current ESG reporting and identify gaps in operational risk integration.
• Next 12 months: Develop a proposal for integrating key climate-related operational risks into your business unit's risk register and control framework.
• QuickWin: Start by including 'climate-related' or 'ESG' as a potential risk category in your team's incident investigations or risk assessments, even if it's just a placeholder for now.

Advancing Technical Skills

• Skill: Predictive Analytics for Operational Risk
• Why: Moving from reactive incident response to proactive risk prediction is the holy grail. Advanced analytics and machine learning will allow us to identify patterns and precursors that indicate a higher likelihood of future incidents, enabling preventative action.
• Concepts: [{'concept_name': 'Time Series Analysis for KRI Trends', 'description': 'Using statistical methods to analyse trends in Key Risk Indicators to forecast potential breaches or increases in risk exposure.'}, {'concept_name': 'Machine Learning for Anomaly Detection', 'description': 'Applying ML algorithms to large datasets (e.g., sensor data, maintenance logs) to identify unusual patterns that could signal an emerging operational risk.'}, {'concept_name': 'Data Engineering for Risk Models', 'description': 'Understanding the principles of building robust data pipelines to feed clean, reliable data into predictive risk models.'}]
• Prepare: This quarter: Take an introductory course on Python or R for data analysis, focusing on statistical modelling.
• Next 6 months: Identify one key KRI in your business unit and try to build a simple predictive model using historical data.
• Next 12 months: Work with a data scientist (if available) to explore how machine learning could be applied to predict specific incident types within your scope.
• QuickWin: Start tracking your KRIs more rigorously and look for correlations with past incidents. Even simple visual trend analysis can be a starting point for predictive thinking.

Education Requirements

• Level: Minimum
• Req: A Bachelor's degree in a relevant field such as Risk Management, Occupational Health & Safety, Environmental Science, Engineering, Business, or a related technical discipline.
• Alts: We're open to candidates with equivalent professional qualifications (e.g., NEBOSH Diploma) combined with extensive, demonstrable experience (15+ years) in a senior operational risk role.
• Level: Preferred
• Req: A Master's degree (e.g., MSc in Risk Management, MBA with a focus on Operations or Compliance) would be a distinct advantage, showing a commitment to advanced strategic thinking.
• Alts: Not strictly required, but it certainly helps you stand out.

Experience Requirements

You'll need roughly 12-16 years of progressive experience in operational risk management, health & safety, environmental compliance, or a closely related field. This should include at least 3-5 years in a leadership or managerial capacity, where you've been responsible for managing a team and designing significant risk programmes. We're looking for someone who has genuinely owned a significant piece of the risk puzzle, not just contributed to it. Experience facing off with regulators and managing complex incident investigations is also critical.

Preferred Certifications

• Cert: Certified Risk Management Professional (CRMP)
• Prod: Institute of Risk Management (IRM) or similar accredited body
• Usage: Shows a broader, more strategic understanding of risk management principles beyond just H&S, which is crucial for a managerial role.
• Cert: ISO 31000 Lead Risk Manager
• Prod: Various accredited training providers
• Usage: Demonstrates expertise in the international standard for risk management, which is highly relevant for designing and implementing our frameworks.
• Cert: Lead Auditor (e.g., ISO 45001, ISO 14001)
• Prod: Various accredited training providers
• Usage: Highlights your ability to conduct and oversee robust internal and external audits, ensuring our management systems are effective and compliant.

Recommended Activities

• Actively participate in industry forums, conferences, and working groups related to operational risk, health & safety, or environmental compliance. This keeps you current and helps build your network.
• Seek out opportunities to mentor junior professionals, even outside your direct team. This strengthens your leadership and coaching skills.
• Regularly review and contribute to internal best practice sharing sessions, bringing external insights back into our organisation.
• Undertake continuous learning in emerging areas like AI in risk management, ESG reporting, or supply chain resilience. The landscape is always changing.

Career Progression Pathways

Entry Paths to This Role

• Path: From Senior Operational Risk Analyst (Internal)
• Time: 3-5 years at Senior level
• Path: From Lead Operational Risk Analyst / Risk Control Specialist (Internal/External)
• Time: 2-4 years at Lead level
• Path: From Operational Risk Consultant (External)
• Time: 5-8 years of consulting experience with team lead responsibilities

Career Progression From This Role

• Pathway: Director of Operational Risk & Compliance (L6)
• Time: 3-5 years in this Manager role

Long Term Vision Potential Roles

• Title: Chief Risk & Safety Officer (CRSO) (L7)
• Time: 8-12+ years from this role
• Title: Head of Enterprise Risk Management
• Time: 7-10 years from this role
• Title: VP of Operations (with strong CQHS focus)
• Time: 10-15 years from this role

How Zavmo Delivers This Role's Development

DISCOVER Phase: Skills Gap Analysis

Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.

Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.

DISCUSS Phase: Personalised Learning Pathway

Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).

Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.

DELIVER Phase: Conversational Learning

Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.

Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."

DEMONSTRATE Phase: Competency Assessment

Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.

Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.