United Kingdom · Compliance, quality and safety · Senior (5-8 years)

Senior Risk Control Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

Free to start: a plan built for this role, and a Future Fluency module to try first. No card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Also at another level: the Risk Control Manager job description.

Upskilling a team in this role? Talk to us

  • Experience bandSenior (5-8 years)
  • Direct reportsNo direct reports
  • Reports toLead Risk Control Analyst
  • UK framework levelUsually a manager, or the deepest specialist in a team

Also advertised as Senior EHS Specialist · Lead Compliance Officer · Risk & Safety Lead · Compliance Programme Lead

Built on 43,079 real UK job descriptions we analysed · grounded in qualifications employers recognise

1From this job to a course

The qualifications matched to this job

Qualifi Level 5 Extended Diploma in Occupational Health and Safety Qualifi Ltd · Level 5 · covers 2 of 10 standards
NOCN Level 6 NVQ Diploma in Occupational Health and Safety Practice NOCN · Level 6 · covers 1 of 10 standards
GQA Level 5 Diploma in the Practice of Process Safety Management GQA Qualifications Limited · Level 5 · covers 1 of 10 standards
NOCN Level 5 Diploma in Civil Engineering NOCN · Level 5 · covers 1 of 10 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Controlling Health and Safety Risks Qualifi Level 5 Extended Diploma in Occupational Health and Safety
Control Health and Safety Risks NOCN Level 6 NVQ Diploma in Occupational Health and Safety Practice
Maintain Systems and Processes for Health, Safety, Welfare and Environmental Protection in an Engineering Environment NOCN Level 5 Diploma in Computer Engineering (Information Technology and Data Science)
Understand how to comply with the relevant Regulations, Industry Standards and Management Requirements for Process Safety GQA Level 5 Diploma in the Practice of Process Safety Management
Maintain Systems and Processes for Health, Safety, Welfare and Environmental Protection in a Working Environment NOCN Level 5 Diploma in Civil Engineering

The future skills this job leans on

AI Fluency working with AI as a thinking partner
Data Fluency turning numbers into a decision
AI Governance Fluency using AI responsibly
Sustainability Fluency building care for people and planet into the work
Foresight Fluency seeing round the corner
Your Plan Illustration

Built for Senior Risk Control Manager

5 units that map to this job, from the qualifications that cover it.

  1. Controlling Health and Safety Risks Qualifi Ltd · covers 2 of 10 standards Level 5
  2. Control Health and Safety Risks NOCN · covers 1 of 10 standards Level 6
  3. Maintain Systems and Processes for Health, Safety, Welfare and Environmental Protection in an Engineering Environment NOCN · covers 1 of 10 standards Level 5
  4. Understand how to comply with the relevant Regulations, Industry Standards and Management Requirements for Process Safety GQA Qualifications Limited · covers 1 of 10 standards Level 5
  5. Maintain Systems and Processes for Health, Safety, Welfare and Environmental Protection in a Working Environment NOCN · covers 1 of 10 standards Level 5
These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a Senior Risk Control Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

  • Advanced AI for Risk Modelling & Prediction
  • ESG Reporting & Assurance
Why each one is rising

The future skills this job leans on

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Senior Risk Control Manager plan as you set up, starting with a Future Fluency module on using AI in your job. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

3What this role really is

A senior risk control manager investigates incidents, finds the causes, and designs ways to prevent them happening again. The work involves owning parts of safety and compliance programmes, making sure standards are met in practice.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

EHS/GRC Platforms (e.g., Intelex, Cority, VelocityEHS) Advanced

Configuring workflows for incident management and Management of Change (MOC). Building custom dashboards for site-level reporting. Training new users and acting as a local super-user for the platform.

Audit & Compliance Software (e.g., AuditBoard, Workiva, LogicGate) Expert

Designing audit programmes and control testing methodologies within the platform. Managing user permissions and developing reporting for audit committees and senior leadership.

Data Visualisation (e.g., Power BI, Tableau) Advanced

Connecting to multiple data sources (SQL, Excel, EHS platform APIs). Building complex, interactive dashboards tracking leading and lagging indicators for risk performance. Using DAX or calculated fields to extract deeper insights.

Document Management (e.g., SharePoint, Veeva QualityDocs) Advanced

Designing and implementing document control workflows, review cycles, and archival policies. Managing site architecture and complex permission structures for controlled documents.

Advanced Excel (e.g., Power Query, Pivot Tables, VBA) Expert

Using Power Query to clean and transform messy data from multiple sources for investigations and trend analysis. Building robust data models for what-if scenarios and complex risk calculations. Potentially writing simple VBA macros to automate repetitive tasks.

Collaboration & Project Management (e.g., MS Teams, Jira, Asana) Advanced

Managing complex projects (e.g., ISO certification implementation, major incident response) using Jira or Asana. Setting up boards, defining sprints/workflows, and creating project status reports for stakeholders.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choiceComing in Where you are nowThe step above
Incident Investigation Methodology Follows prescribed methodology (e.g., 5 Whys) for minor incidents, escalates complex ones. Chooses appropriate methodology (e.g., Fishbone, 5 Whys) for most incidents, consults on complex ones. Defines and leads the application of advanced methodologies (e.g., TapRooT, Causal Factor Analysis) for all complex incidents. Recommends methodology improvements.
Programme Design & Implementation Assists with data collection and documentation for existing programmes. Takes ownership of specific programme elements (e.g., permit management), proposing minor improvements. Designs and implements entirely new risk control programmes or significant overhauls of existing ones (e.g., MOC, contractor safety). Full technical ownership.
Budget Approval (Project-related) No approval authority; raises requests to supervisor. Can recommend spend up to £1K for training or minor equipment, requires manager approval. Approves spend up to £5K for project-related items (e.g., specialist training, minor equipment). Recommends larger budget proposals to Lead Analyst.
Regulatory Engagement Provides requested data to supervisor for regulatory responses. Drafts responses to routine regulatory queries, reviewed by manager. Acts as primary point of contact for regulatory inspections, represents the organisation, manages follow-up actions, consults with legal/manager on critical communications.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Targeted Incident Type Reduction
Achieve a measurable year-over-year reduction in specific incident categories that you've identified as high-priority.
Target · 15% reduction in a targeted incident category (e.g., slips, trips, and falls) annually.

After implementing new controls for manual handling, the number of musculoskeletal injuries dropped from 20 to 16 in a year, hitting the 20% reduction target for that category.

Audit Finding Closure Rate
How quickly and effectively you ensure that major non-conformities identified during internal or external audits are addressed and closed out.
Target · 95% of major non-conformities from external audits closed within 60 days.

Following the ISO 45001 audit, you led the team to close 19 out of 20 major findings within the agreed 60-day timeframe, with the last one closing at 65 days.

Mentee Progression & Impact
The demonstrable growth and increased responsibility of the junior specialists you mentor.
Target · 1-2 mentored specialists successfully promoted or take on significantly expanded responsibilities within 18 months.

Your mentee, Sarah, took over the full management of the confined space entry programme after 12 months, having previously only assisted with permits.

Risk Register Accuracy & Actionability
The quality and completeness of the risk register for your assigned areas, ensuring it's a living document that drives action.
Target · 90% of identified high-priority risks have active, assigned controls and review dates, with <5% overdue reviews.

You reviewed the site's chemical storage risk register, identified two critical gaps in spill containment, and ensured corrective actions were assigned and tracked to completion within the quarter.

Operational Buy-in & Trust
The extent to which operational teams actively seek your input and genuinely value your advice on safety and compliance matters, rather than seeing you as a barrier.
  • Operations managers proactively invite you to planning meetings for new projects. Frontline supervisors come to you with concerns before they become incidents. You're seen as a problem-solver, not just a rule-enforcer. Your recommendations are adopted without significant pushback.
Quality of Incident Investigations
The depth and thoroughness of your incident investigations, consistently identifying systemic root causes beyond simple human error.
  • Investigation reports consistently include detailed causal factor analysis (e.g., 5 Whys, Fishbone). Corrective actions address systemic issues, not just symptoms. Incidents with similar underlying causes don't recur. Your investigations hold up under external scrutiny.
Proactive Programme Development
Your ability to identify gaps in our current risk control programmes and design/implement practical improvements before issues arise.
  • You propose and lead the implementation of new safety procedures or training modules based on trending near-miss data. You're always looking for ways to improve our ISO management systems, not just maintain them. You're bringing ideas to the table, not just reacting.
Effective Communication of Complex Risks
Your knack for explaining complex technical risks and regulatory requirements in a way that makes sense to everyone, from the shop floor to senior management.
  • Your presentations to leadership are clear and concise, leading to quick decisions. Toolbox talks you deliver are engaging and memorable. Frontline workers understand the 'why' behind new safety rules you introduce. You can tailor your message to different audiences effortlessly.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy
Making a Tangible Difference

You'll get a real kick out of seeing a safety improvement you championed reduce incident rates or prevent a potential injury. This isn't just theory; it's about protecting real people.

You've just seen the monthly incident report, and the specific type of injury you focused on last quarter has dropped by 25%. That's a good day.

Solving Complex Puzzles

Incident investigations are often like detective work – piecing together clues, interviewing people, and figuring out the true sequence of events and underlying causes. If you love getting to the bottom of things, you'll enjoy this.

You've spent a week on a tricky incident, interviewing five different people and reviewing hours of CCTV, and you've finally pinpointed the exact combination of factors that led to it. The 'aha!' moment.

Driving Continuous Improvement

You'll be constantly looking for ways to make our management systems better, our processes safer, and our compliance more robust. If you're always asking 'How can we do this better?', you'll fit right in.

You're updating the site's emergency response plan, not just because it's due, but because you've identified three areas where it could be significantly more effective based on a recent drill.

What frustrates people
  • The 'Department of No' perception: Constantly battling the idea that your job is to stop work and add bureaucracy, rather than enabling safe and efficient operations.
  • Production vs. Safety tension: The daily, unspoken conflict where operational teams are focused on output and speed, while you're upholding safety standards that might slow things down.
  • Lip Service Leadership: Dealing with executives who talk passionately about 'Safety First' in town halls but then aren't willing to fund necessary improvements or accept a production delay to fix a known risk.
  • Investigation Burnout: The emotional toll of repeatedly investigating incidents where the root cause is a known issue that was previously identified but never properly addressed due to budget or politics.
  • The Paperwork Avalanche: Drowning in documentation for audits, permits, and reports, which often takes you away from being on the floor where you can make the most impact.
  • 'Pencil-Whipping': The endless fight against a check-the-box compliance culture, where forms are filled out without any real thought or action behind them.
  • Data Janitor Duty: Spending more time cleaning up messy, inconsistent data from different systems (e.g., trying to match maintenance logs to incident reports) than actually analysing it for trends.
What this role does not give you
  • A quiet, predictable routine with no surprises – expect the unexpected.
  • Direct authority over operational teams; you'll lead through influence and expertise.
  • Constant praise for preventing incidents; often, your best work is invisible because nothing bad happened.
  • A role where you only deal with technical problems; there's a significant human and political element.

8Who you work with

This role directly influences the safety culture and operational resilience across our sites. Your work ensures we meet our legal obligations, protect our workforce, and maintain our operating licence. Get it right, and you'll prevent major disruptions and safeguard our reputation. Get it wrong, and the consequences could be severe, both financially and in terms of human well-being.

Inside the business
  • Lead Risk Control Analyst (your manager)
  • Operations Managers (site and regional)
  • Engineering & Maintenance Teams
  • HR Business Partners
  • Project Managers (for new initiatives)
  • Junior Risk Control Specialists (your mentees)
Outside the business
  • External Auditors (e.g., ISO auditors)
  • Regulatory Bodies (e.g., HSE, Environment Agency)
  • Vendors & Contractors (for safety compliance)
  • Insurance Providers (for incident data)

9What you need before you start

Not a wish list. The things you would be expected to already have.

  • Proven track record of leading complex incident investigations and delivering actionable root cause analyses.
  • Demonstrable experience in designing, implementing, and managing elements of ISO management systems (e.g., ISO 45001, ISO 14001).
  • Strong ability to influence operational teams and senior stakeholders without direct authority, getting buy-in for safety initiatives.
  • Advanced proficiency in data analysis and visualisation, able to turn raw data into clear, compelling insights.
  • Experience mentoring or providing technical guidance to junior team members, helping them develop their skills.
  • A solid understanding of UK health, safety, and environmental legislation and how to apply it in a practical operational setting.

10What to practise next

Where the job is going, and what to do about it starting this week.

Digital Audit & Continuous Monitoring

Manual audits are time-consuming and only provide a snapshot. The future is about using technology to continuously monitor controls and identify deviations in real-time. This means less 'gotcha' auditing and more proactive risk management.

Robotic Process Automation (RPA) · Data Analytics for Anomaly Detection · API Integration for GRC Systems · Dashboarding for Real-time Compliance

  • This month: Research examples of 'continuous auditing' or 'digital compliance monitoring' in our industry.
  • Next quarter: Look into how our existing GRC platform (e.g., Intelex) can integrate with other systems or external data sources.
  • Month 3-6: Take a course on Power BI or Tableau advanced features, focusing on connecting to live data feeds and building dynamic alerts.
  • Month 6-12: Propose a small pilot project to automate a routine compliance check using existing tools or a simple RPA script.

Quick win: Identify one manual data comparison task you do for audits and explore if Power Query in Excel can automate it. It's a small step, but it builds the mindset.

11Staying current once you are in

What people here do to keep up
  • Regularly attend industry conferences and seminars (e.g., Safety & Health Expo, IOSH events) to stay current on best practices and emerging risks.
  • Actively participate in professional networks and forums (e.g., IOSH branches, LinkedIn groups) to share knowledge and learn from peers.
  • Undertake continuous professional development (CPD) to maintain and enhance your technical and leadership skills, keeping your certifications current.
  • Read relevant academic papers and industry publications to deepen your understanding of specific risk control challenges and solutions.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

Advanced AI for Risk Modelling & Prediction

Competitors are already using AI to predict potential incident hotspots with surprising accuracy. Analysts who figure this out will outproduce peers and prevent incidents that others miss. It's about moving from reactive to truly predictive risk management.

  • Machine Learning Fundamentals
  • Predictive Analytics Tools
  • Data Feature Engineering
  • Model Validation & Explainability

ESG Reporting & Assurance

Environmental, Social, and Governance (ESG) factors are no longer just 'nice-to-haves' for businesses; they're becoming critical for investor relations, regulatory compliance, and brand reputation. Risk control professionals will increasingly be responsible for the data and assurance behind these claims.

  • ESG Frameworks
  • Carbon Footprinting & Scope Emissions
  • Social Metrics
  • Data Assurance for Non-Financials

13What you’ll use

What you’ll use

Skills this role draws on

Technical

  • Risk Assessment Methodologies
  • Root Cause Analysis (RCA)
  • Management Systems & Standards
  • Hierarchy of Controls
  • Behavior-Based Safety (BBS)
  • Business Continuity & Crisis Management

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

  1. 1

    From Risk Control Specialist (L2)

    2-3 years at L2

    Skills to master

    • Leading minor investigations independently, managing specific safety programmes, delivering basic training, and building relationships with operational teams.

    You're ready to move on when

    • Consistently delivers high-quality work with minimal supervision.
    • Proactively identifies and proposes solutions to emerging risks.
    • Demonstrates initiative in taking on more complex tasks.
    • Receives positive feedback from internal stakeholders on collaboration and problem-solving.
  2. 2

    From EHS Engineer / Quality Assurance Specialist

    3-5 years in a similar role

    Skills to master

    • Translating technical engineering/quality knowledge into practical risk control measures, understanding regulatory compliance, and developing strong communication skills for diverse audiences.

    You're ready to move on when

    • Has a strong technical background and can apply it to HSEQ challenges.
    • Shows a keen interest in incident investigation and root cause analysis.
    • Is eager to take on broader compliance and safety management responsibilities.
    • Has experience working in an operational or manufacturing environment.
  3. 3

    From External Consultant (Junior/Mid-Level)

    2-4 years in consulting

    Skills to master

    • Adapting consulting frameworks to an in-house operational context, building long-term relationships, and understanding internal political dynamics.

    You're ready to move on when

    • Proven ability to deliver projects on time and to a high standard.
    • Strong analytical and problem-solving skills.
    • Demonstrates a desire to 'own' solutions and see them through to implementation.
    • Can show examples of influencing clients to adopt recommendations.

15Where this role leads

The long view: This work can lead into senior compliance leadership, corporate risk strategy, or a specialist technical path focused on designing risk management systems.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Senior Risk Control Manager is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Controlling Health and Safety Risks, worked against Senior Risk Control Manager.

Controlling Health and Safety Risks Level 5

Applied to your work in Senior Risk Control Manager

The objective of this unit is to equip learners with the skills and knowledge to identify and evaluate workplace hazards, assess associated risks, and implement effective risk control measures and safe systems of work. Learners will understand the processes involved in identifying, assessing, and controlling health and safety risks within an organisation.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

See Your Progress Grow Illustration
Senior Risk Control Manager
  • Risk Assessment Methodologies
  • Root Cause Analysis (RCA)
  • Management Systems & Standards
  • Hierarchy of Controls
  • Behavior-Based Safety (BBS)
  • Business Continuity & Crisis Management
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Senior Risk Control Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

  1. Lead Risk Control Analyst (L4)

    3-5 years in Senior Risk Control Manager role

    This is a step up into a more strategic role, where you'll be designing enterprise-wide programmes and potentially managing a small team of specialists. You'll be influencing at a higher level and tackling more ambiguous, novel problems.

    • Enterprise Risk Management (ERM) Frameworks Understanding how to integrate operational risk into a broader ERM framework.
    • Budget Management Managing a budget of £50K-£500K for risk control initiatives.
    • Vendor & Contractor Management Owning relationships with key external partners and ensuring their compliance.
    • Policy Development Architecting new company-wide policies and standards.
  2. Risk Control Manager (L5)

    4-6 years in Senior Risk Control Manager role (often after a stint as Lead Analyst)

    This pathway moves you into direct management of a larger team and ownership of a significant functional area or department. You'll be setting the vision, owning the budget, and shaping the organisational capability.

    • P&L Management (£500K-£2M) Owning the financial performance of your function.
    • Talent Acquisition & Retention Building and retaining a high-performing team.
    • External Representation Representing the organisation to regulators, industry bodies, and sometimes the media.
    • Strategic Planning Developing multi-year strategies for the risk control function.
Working with AI on the job

Working with AI

Where AI is starting to help

Imagine having a super-smart assistant that handles the tedious bits of risk control, freeing you up for the critical thinking and on-the-ground work. That's what AI can do for a Senior Risk Control Manager. It's not about replacing you; it's about making you incredibly more effective.

In Compliance_Quality_Health_Safety, AI isn't just a buzzword; it's a practical tool that can transform how you manage incidents, predict risks, and stay on top of ever-changing regulations. We're talking about real time savings that let you focus on what truly matters: preventing harm and building a safer workplace.

Automated Incident Triage

AI can quickly analyse unstructured text from incident reports, emails, or hotline calls. It'll auto-populate initial reports, categorise severity, and flag keywords like 'hospital' or 'regulator' for immediate escalation. This means less manual data entry and faster response times when every minute counts.

Predictive Risk Hot-Spotting

Forget hours of manual trend analysis. AI models can crunch historical data from incidents, near misses, maintenance logs, and even environmental factors. It'll then predict which areas, equipment, or shifts have the highest probability of an incident in the upcoming week, allowing you to intervene proactively before something happens. It's like having a crystal ball for safety.

Regulatory Change Summariser

Staying on top of new legislation is a full-time job in itself. AI can scan regulatory updates from bodies like the HSE or Environment Agency, providing you with concise summaries of changes. It'll even identify which internal policies and procedures are likely impacted, often with draft language for updates. Imagine the time saved on legal research!

Safety Communication Co-Pilot

Drafting clear, concise safety alerts, toolbox talks, or investigation summaries for different audiences can be tricky. AI can act as your writing assistant, helping you craft messages that resonate, whether it's for shop floor employees or the executive board. It can even tailor the tone and language to ensure maximum impact and understanding.

Common questions

Common questions

How do you become a Senior Risk Control Manager?

Common routes in include From Risk Control Specialist (2-3 years at L2), From EHS Engineer / Quality Assurance Specialist (3-5 years in a similar role) and From External Consultant (Junior/Mid-Level) (2-4 years in consulting). Times vary with prior experience.

Where can a Senior Risk Control Manager progress to?

This role can lead on to Lead Risk Control Analyst (3-5 years in Senior Risk Control Manager role) and Risk Control Manager (4-6 years in Senior Risk Control Manager role (often after a stint as Lead Analyst)), depending on the skills you build.

What new skills matter most for a Senior Risk Control Manager?

Increasingly, Advanced AI for Risk Modelling & Prediction and ESG Reporting & Assurance. These are the skills our record of this role lists as growing.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

17Where to go from here

Other roles at Level 5

Same depth of qualification, different job. Useful if the work appeals but this particular role does not.

This job at other levels
More jobs in compliance, quality and safety

Stay in the field you know and move sideways rather than up.

If you leave this industry

The skills built in this role transfer across industries. They can lead to consulting work, a focus on a specific high-risk sector such as oil and gas or nuclear, or roles in operational excellence or quality management. Risk control expertise stays in demand across sectors.

This role profile is © 2026 Growth Engineering Technologies Ltd. Built from UK occupational standards and regulated qualification data, and written for Zavmo.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my Senior Risk Control Manager plan, free What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.