Head of Risk

Head of Risk Recruitment

FD Capital recruits Heads of Risk for UK businesses — senior risk leadership professionals placed into financial services firms, PE-backed businesses, insurance, asset management, corporates and regulated SMEs. The Head of Risk role sits at the senior specialist level of the risk function, typically reporting to a Chief Risk Officer, Chief Financial Officer or directly to the board in businesses where the Head of Risk is the most senior risk professional. Adrian Lawrence FCA, founder of FD Capital and a Fellow of the ICAEW, leads our senior finance and risk recruitment practice. We place Heads of Risk across permanent, interim and fractional engagement types, with particular strength in FCA-regulated firms, PE-backed portfolio companies and complex corporate risk environments.

Call 020 3287 9501 or email recruitment@fdcapital.co.uk. Shortlists typically delivered within five to seven working days.

Head of Risk vs Chief Risk Officer — What Is the Difference?

The distinction between Head of Risk and Chief Risk Officer matters both for the seniority and scope of the brief and for the type of candidate required. A Chief Risk Officer is typically a C-suite appointment — carrying board-level accountability, often holding an SMF4 designation under SMCR in FCA-regulated firms, and setting the firm’s overall risk appetite and governance framework at the most senior level. See our Chief Risk Officer Recruitment page for that specific appointment type.

A Head of Risk operates at the senior specialist level — leading the risk function, managing the risk team, owning the risk register and reporting framework, and providing the technical risk analysis and oversight that enables the CRO or CFO to exercise their governance responsibilities. In many mid-sized businesses, particularly those without a dedicated CRO, the Head of Risk is the most senior risk professional in the organisation and carries substantive responsibility that in practice overlaps significantly with what a CRO does at a larger firm.

For businesses deciding which appointment they need, the practical test is: does the role require board-level presence and regulatory authority designation (CRO), or does it require technical risk leadership and function management (Head of Risk)? For FCA-regulated firms, the SMCR SMF4 designation attached to the CRO role carries specific regulatory accountability — if that accountability needs to sit somewhere, it is a CRO appointment. If the firm needs someone to run the risk function, manage the team and produce the risk reporting, a Head of Risk is typically the appropriate level.

What a Head of Risk Does

Risk identification, assessment and monitoring

The Head of Risk owns the firm’s risk register — ensuring that risks are systematically identified, assessed for likelihood and impact, assigned ownership, and monitored on an ongoing basis. In financial services firms this typically encompasses market risk, credit risk, operational risk, liquidity risk and regulatory risk as separate categories, each requiring different measurement methodologies and monitoring frameworks. In corporate and PE-backed businesses the scope is typically enterprise risk: strategic, operational, financial and reputational risks mapped against the business’s objectives and assessed using frameworks such as ISO 31000 or COSO ERM.

Risk reporting and governance

The Head of Risk produces the risk reporting for the board, risk committee, audit committee and any relevant regulatory bodies — translating the risk register into clear, actionable management information that enables governance decisions. In FCA-regulated firms this includes reporting to the board risk committee and preparing the ICAAP or ILAAP submissions where relevant. In PE-backed businesses it typically involves preparing quarterly risk reports for the sponsor and ensuring the risk framework meets the requirements of the investment documentation.

Risk framework design and maintenance

Beyond day-to-day monitoring, the Head of Risk owns the design and maintenance of the firm’s risk framework — the policies, procedures, appetite statements, tolerance levels and escalation protocols that govern how risk is managed across the business. Building this from scratch in a business that is formalising its risk function for the first time, or upgrading an existing framework to meet regulatory or investor requirements, is a significant project that requires both technical risk expertise and the stakeholder management skills to embed new ways of working across the organisation.

Second line of defence and three lines model

In financial services and other regulated businesses, the Head of Risk typically sits within the second line of defence — providing independent oversight of the risk-taking activities of the first line (business units and operational teams) without owning those activities directly. Maintaining genuine independence while building effective working relationships with first-line colleagues is one of the most important professional skills for a Head of Risk in a regulated firm, and candidates who have operated effectively in a three lines model — understanding both its purpose and its practical tensions — are significantly more valuable than those with risk management experience outside that structure.

Regulatory and compliance interface

In FCA-regulated firms the Head of Risk works closely with the compliance function on matters that sit at the boundary of risk and regulatory compliance — financial crime risk, conduct risk, SMCR governance and the risk elements of Consumer Duty implementation. In businesses subject to other regulatory frameworks (PRA, FRC, ICO) the Head of Risk provides the risk input into regulatory submissions, inspections and remediation programmes. The ability to communicate effectively with regulators and to translate regulatory requirements into practical risk management actions is a specific capability that FD Capital assesses in all Head of Risk candidates for regulated firm briefs.

Head of Risk in PE-Backed Businesses

PE sponsors increasingly require their portfolio companies to have a formalised enterprise risk management function — particularly for businesses preparing for exit, businesses seeking additional debt financing, or businesses scaling through acquisition where integration risk needs to be managed systematically. A Head of Risk in a PE-backed business typically builds the ERM framework from limited foundations, produces the risk reporting that the sponsor requires for portfolio monitoring, and ensures the business is able to demonstrate risk management maturity to potential acquirers or lenders during due diligence.

The profile for this type of appointment differs from a financial services Head of Risk. Commercial pragmatism matters more than deep regulatory knowledge. The ability to build practical processes in a business without a large risk team matters more than experience managing a sophisticated risk technology stack. And the ability to align the risk framework with the business’s growth objectives — rather than positioning risk management as an obstacle to commercial decision-making — is essential. FD Capital’s PE-backed business risk recruitment draws on our broader private equity finance practice and our understanding of what PE sponsors require from portfolio company risk functions.

Head of Risk Salary and Day Rate Guide UK 2026

London salary premiums of 15–25% typically apply. Total remuneration packages in financial services often include significant bonus components — base salary figures above represent fixed pay only. For Chief Risk Officer salary benchmarks at C-suite level see our Chief Risk Officer Recruitment page. For compliance function salary benchmarks see our Compliance Salary Guide.

Qualifications and Certifications

FD Capital’s Head of Risk candidates typically hold one or more of the following qualifications alongside relevant sector experience. The Professional Risk Manager (PRM) designation from PRMIA and the Financial Risk Manager (FRM) certification from GARP are the most widely recognised specialist risk qualifications. The Institute of Risk Management (IRM) Certificate and Diploma in Risk Management are particularly relevant for ERM-focused roles in corporate and PE-backed businesses. Chartered Accountant (ACA/ACCA) or CFA qualifications are common in financial services risk roles where accounting or investment analysis underpins the risk function.

Sector experience is typically more important than qualification profile in shortlisting Head of Risk candidates. A candidate with ten years of operational risk experience in an FCA-regulated asset manager brings more than a recently qualified PRM with limited sector exposure. FD Capital assesses candidates on the quality and depth of their experience in the specific risk framework the hiring business operates — not on qualification status alone.

Related Risk and Senior Finance Recruitment

Businesses recruiting a Head of Risk may also be interested in: Chief Risk Officer Recruitment | Fractional Chief Risk Officer | Chief Risk Management Officer | Chief Risk and Compliance Officer | SMCR Compliance Recruitment | Compliance Recruitment | Financial Crime Recruitment | Head of Finance Recruitment | Head of Treasury Recruitment | CFO Executive Search