At Smart, our mission is to transform retirement, savings and financial wellbeing, across all generations, around the world.

THE ROLE

As a member of the Risk and Assurance team, you will support the development and embedding of a strong risk management and operational resilience culture across the organisation. Reporting to the Director of Risk and Assurance, you will contribute to the identification, assessment, and management of risks that could impact important business services, with a particular focus on operational resilience and supplier risk.

You will work with business stakeholders to assess vulnerabilities, strengthen controls, and support contingency planning to enhance service continuity. The role will also provide timely risk analysis, reporting, and insight to management to support informed decision-making and effective risk oversight.

Key responsibilities:

Business continuity

• Develop and maintain a business continuity policy and recovery plan and procedure in accordance with IS0 22301. Ensure disaster recovery procedures/plans are incorporated into the business continuity plan.

• Conduct business impact assessments for/with various departments and functions, analysing potential business impact of unpredictable business interruptions such as cyber attacks, security breach, privacy incidents

• Identify and implement recovery operations and methods to allow Smart to function at limited or partial capacity in the event that part or all of the environment is damaged or destroyed.

Incident response

• Create and facilitate incident response simulations to ensure business readiness for disasters/unexpected events

• Collaborate with engineering, IT and cyber security teams to ensure incident response plans are fit for purpose and in line with the Smart incident response policy, and communicated effectively.

• Highlight risks and areas for improvement after each exercise/incident, and ensure issues are captured, completed, and reviewed for mitigation.

• Provide support to Smart’s partners and clients to enable a clear understanding of these committments, and the level of service we offer.

Supplier Risk Management

• Maintain and enhance the Supplier Risk Management Framework, including defined risk appetite, governance structures, and supporting policies and procedures.

• Maintain and continuously improve supplier risk scoring models to effectively evaluate supplier performance and risk exposure.

• Oversee the identification, assessment, and ongoing monitoring of supplier risks, including financial, operational, regulatory, cybersecurity, geopolitical, and ESG (Environmental, Social, and Governance) risks.

• Oversee due diligence processes for new and existing suppliers, ensuring alignment with internal standards and applicable industry regulations.

• Oversee the Supplier Risk Management Assurance Framework, ensuring effective controls, monitoring, and continuous improvement.

Client management

• Provide information and update to Smart’s partners and clients to enable a clear understanding of Smarts risk and audit activities

• Provide ongoing due diligence to Smart’s partners and clients

• Reporting

• Produce management reports, risk updates, and governance materials for senior management, risk committees, and external stakeholders, providing assurance to auditors and clients.

• Provide general risk reports tailored to any audience (senior management, committees, board)

Risk management

• Support the risk identification and assessment process, ensuring management have a clear and continuous view of the risk exposure of the organisation

• Lead on any ad hoc risk research projects as directed to deepen the understanding of risk across Smart

• Promote a positive risk culture in Smart which reflects the uniqueness of Smart as an organisation and builds upon the eight Smart principles

• Work collaboratively with the Smart Risk team, Audit, and compliance and build strong stakeholder relationships

WHO WE ARE LOOKING FOR

The skills, experience, and aptitudes we are looking for are listed below but please don’t be discouraged from applying if you don’t meet every single one of these criteria – having a ‘can do’ attitude is sometimes more important than being able to tick every box:

• The skills, experience, and aptitudes we are looking for are listed below but please don’t be discouraged from applying if you don’t meet every single one of these criteria – having a ‘can do’ attitude is sometimes more important than being able to tick every box:

• 7+ years of work experience in the practice of operational resilience and risk management

• Experience running multiple, high-priority projects and advancing complex projects

• Knowledge and experience of industry frameworks such as IS0 27001 and ISO 22301 desirable

• Excellent time management, planning, process design and execution skills

WHO WE ARE

We work in partnerships with governments and financial institutions in the UK and internationally. Our cloud-native digital platform is revolutionising how people around the world think about, and save for, their retirement.

At heart, we’re a financial technology business. What we do is all about innovation, and using the power of digital change to put the customer first. Our Engineers will tell you that working at Smart gives you the opportunity to play your part in developing world-class technological solutions, working with – and learning from – like-minded people.

You’ll also find that, across our business, our colleagues love Smart’s culture, and how what we do means better financial outcomes for savers. That feels worthwhile, and it means that what we do, collectively, goes way beyond the nine to five of a typical working day.

Don’t just take our word for it – you can see what our colleagues say about working at Smart on LinkedIn Life and Glassdoor.

BENEFITS

At Smart, one of the eight principles we work to is “We want happy and good people in our team”. We created a list of benefits that helps us achieve this goal:

• 25 days’ holiday per year, increasing with length of service.

• £500 annual training budget to spend on your professional development

• Extensive private healthcare, including dental, eyecare and EAP

• Enhanced sick leave (three months’ pay per year)

• Enhanced maternity and paternity (maternity – 6 months fully paid/paternity – 3 weeks fully paid)

• Death in service insurance cover

• Fully-paid five-week sabbatical after five years of employment

• In office wellbeing, such as manicures, massages and barbers. 

• Smart employees also enjoy a 50% discount on orders from our sister company Arena Flowers, Britain's most ethical florist. They offer unique hand-tied bouquets, luxury flowers, letterbox flowers, plants and gifts to spend on friends and loved ones or even for yourself.

At Smart, we are committed to creating an inclusive and equitable workplace where everyone feels valued, respected, and empowered to do their best work.

We believe that diverse perspectives help us lead the way in transforming retirement, savings, and financial wellbeing. We welcome differences in background, experience, thinking, and identity, and we recognise that innovation is strongest when it is built on inclusion and fairness. We encourage applications from people of all backgrounds and experiences and do not discriminate on the basis of any protected characteristic.

If you require any reasonable adjustments during the recruitment process or in the workplace, we encourage you to let us know - we are committed to supporting you.

We think Smart is an awesome place to work. If it sounds like somewhere you’d like to work, too, and if you’re ready to play your part in our continued success in the future, then naturally we’d love to meet you.