I am a senior Enterprise Risk, Controls and Governance professional with over a decade of experience helping organisations identify, manage, and respond to complex risks in practical, value-adding ways. I have worked across highly regulated, fast-moving environments and bring a calm, structured, and commercially aware approach to risk management that supports confident decision-making rather than bureaucracy.
My core expertise lies in enterprise and operational risk management, including the design and implementation of risk frameworks, risk and control self-assessments (RCSAs), incident and root-cause analysis, control effectiveness testing, and executive-level risk reporting. I have extensive experience working directly with Boards, Executive Committees, and Audit & Risk Committees, translating complex risk issues into clear, actionable insights that enable effective challenge and oversight.
I specialise in building risk frameworks from first principles, particularly where organisations are scaling, undergoing change, or seeking to mature their governance arrangements. My work focuses on ensuring risk management is proportionate, embedded into day-to-day operations, and genuinely understood by first-line teams, not treated as a compliance exercise. Clients value my ability to influence without authority, coach senior stakeholders on risk ownership, and bridge the gap between governance expectations and operational reality.
Alongside my traditional risk background, I have applied these same disciplines to emerging technology and AI, contributing to AI model quality testing, scenario evaluation, outcome risk assessment, and structured feedback processes. This work draws directly on my experience in assurance, control design, and risk evaluation, allowing me to assess reliability, consistency, bias, and governance considerations in AI systems with the same rigour used in regulated environments.
I am particularly effective in roles that require:
• Independent judgement and senior-level credibility
• Hands-on delivery rather than theoretical frameworks
• Clear communication across technical and non-technical audiences
• Practical solutions to complex or ambiguous risk issues
I work on a project-based, interim, or fractional basis and am comfortable operating remotely or in hybrid environments across the UK. Whether supporting enterprise risk reviews, strengthening control environments, advising on governance, or contributing to AI quality and assurance initiatives, I bring a pragmatic, thoughtful, and outcome-focused approach to every engagement.