Jobs › Edinburgh › Enterprise Risk Manager
Enterprise Risk Manager
Capco is hiring for the job of Enterprise Risk Manager, Edinburgh, UK (On-site). This is a Risk job in the governance, risk, and compliance field. Review the full details below and apply directly with Capco.
Enterprise Risk Manager
Location: Edinburgh (Hybrid) strong Practice Area: Corporate Services Department: Enterprise Risk Type: Permanent
Strengthen enterprise-wide risk management and help shape a resilient, responsible future for Capco.
The Role
As Manager, Enterprise Risk, you will play a key role in strengthening and advancing Capco’s global Enterprise Risk Management (ERM) framework.
You will lead core elements of the framework, including Risk and Control Self-Assessments (RCSAs), third-party risk, policy management, mandatory compliance training and governance. Working globally and cross-functionally across teams, you will help embed effective risk management into business strategy and operational processes.
As Capco continues to scale across geographies and services, including increasingly complex client engagements and the use of AI, you will help ensure risk oversight operates at a strategic, integrated and enterprise-wide level.
What You’ll Do
Lead enterprise-wide and regional RCSAs, ensuring risks are clearly articulated and consistently rated, controls are appropriately assessed, and mitigating actions are tracked through to completion.
Support the continued evolution and global implementation of Capco’s ERM framework, including scenario planning and emerging risk analysis across areas such as geopolitical, regulatory, cyber, AI-related and supply-chain risk.
Design and implement a control-testing framework for high-risk processes, including Anti-Bribery and Corruption (ABAC), and support other Internal Audits across the Enterprise Risk function.
Own key compliance and governance activities, including the annual policy review, Policy Committee, conflicts of interest and gift registries, and mandatory compliance training.
Work with Procurement and business owners to strengthen third-party risk management, including due diligence, ongoing assurance, remediation, supplier oversight and reporting to senior leadership.
What We’re Looking For
5–10 years’ experience across risk management, compliance, governance and/or audit.
Demonstrated experience managing complex projects and delivering effectively across multiple stakeholders and business functions.
Strong communication skills, with the ability to articulate complex risk concepts clearly and effectively.
Ability to collaborate successfully with stakeholders at different levels across regions and functions.
Strategic and commercial acumen gained within a professional services organisation or comparable environment.
Bonus Points For
A professional risk qualification, such as an Institute of Risk Management certificate or diploma.
Experience using OneTrust or another Governance, Risk and Compliance (GRC) platform.
Why Join Capco
Help strengthen and evolve enterprise risk management across a global organisation.
Work with colleagues across a broad range of corporate functions, geographies and disciplines.
Contribute to the management of emerging risks associated with an evolving professional services environment.
Work in a collaborative, flat and entrepreneurial consulting culture.
Access continuous learning, development and opportunities to grow your career.
We offer a competitive, people-first benefits package designed to support every aspect of your life:
Benefits
Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
Mental Health: Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.
Family-Friendly and Family Care: Maternity, adoption and shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause and bereavement, alongside 8 complimentary backup care sessions for emergency childcare or elder care.
Holiday Flexibility and Continuous Learning: 5 weeks of annual leave with the option to buy or sell holiday days based on your needs, plus a minimum of 40 hours of training annually and a Business Coach assigned from Day One.
Healthcare Access and Extra Perks: Convenient online GP services, Gympass (Wellhub), travel insurance, Tastecard, season ticket loans, Cycle to Work and dental insurance.
Inclusion at Capco
We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
Next Steps
Applications will be open until the 28th of September. CV reviews will take place on the 28th and 29th of September with successful candidates being contacted for initial screening calls that week. The following week business interviews will take place with a likelihood of two stages.
Location and market context
This job is based in Edinburgh on-site. Local candidates benefit from being close to Capco's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About risk management jobs
Risk jobs own the methodology for identifying, assessing, and escalating enterprise, operational, and technology risk. Second-line teams set risk appetite and challenge the first line. Jobs like this one are typically evaluated against frameworks such as enterprise and operational risk frameworks, NIST AI RMF, and risk-appetite and escalation practices.
How to position yourself for this risk management job
Strong candidates emphasize risk assessment methodology, appetite and escalation, cross-functional partnership, and clear reporting to senior leadership and the board. In your resume and outreach, tie your experience to how Capco would apply enterprise and operational risk frameworks, NIST AI RMF, and risk-appetite and escalation practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
- Principal Consultant (Senior Manager) - Non-Financial / Operational Risk · Capco · London, UK
- Financial Risk Principal Consultant (Senior Manager) · Capco · London, UK
- Management Consultant - Financial Risk · Capco · London, UK
- Management Consultant - Non-Financial / Operational Risk · Capco · Edinburgh, UK
- Technical Operations Analyst, User Safety & Risk · Openai · London, UK
- Senior Risk Analyst · AlphaSense · India · Remote
- Senior Risk & Governance Engineer · AlphaSense · India
- Third-Party Risk Management Analyst · Samsara · Remote
More jobs at Capco
- DORA Governance & TPRM Specialist · Capco · Italy - Milan
- Business Analyst-Third Party Risk Management · Capco · Bengaluru, India
- Compliance Associate AML/KYC · Capco · Orlando
- Data Governance Analyst | Banking · Capco · Singapore
- Data Governance Specialist | Banking · Capco · Singapore
- ICT Risk Analyst · Capco · Italy - Milan
More GRC jobs in Edinburgh
- Managing Principal (Director) - Financial Crime Transformation - AML Investigations, Sanctions & Fraud · Capco · London, UK
- Managing Principal (Director) - Operational Resilience & Cyber · Capco · London, UK
- Managing Principal - Financial Crime Transformation - AML Investigations, Sanctions & Fraud · Capco · Edinburgh, UK
- Management Consultant - AML Investigations, Sanctions & Fraud · Capco · London, UK
- Principal Consultant - (Senior Manager) Operational Resilience · Capco · Edinburgh, UK
- Principal Consultant (Senior Manager) - Operational Resilience & Cyber · Capco · London, UK
Hiring for Risk?
Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
Want to be next in a job like this?
Jobs like Enterprise Risk Manager in Edinburgh, UK open regularly. Be first to know, privately. No current employer ever sees you looking.
Employer, or see something wrong with this posting? Report this posting and we will review it promptly.