Head of Enterprise Controls (PFA)

About the role

The Head of Enterprise Controls establishes and runs the PFA enterprise controls framework and governance, ensuring alignment with MAS requirements, industry guidelines and Prudential group standards, while independent oversight stays with Line 2 Risk & Compliance. The role governs outsourcing (including Third Party Risk Management) and is the senior escalation point for control breakdowns and systemic issues, partnering the CEO and PFA Management team to drive accountability through governance, reporting and timely remediation.

Key responsibilities

• Set and maintain PFA policies, delegated authorities, governance forums, decision rights and escalation routes with the CEO and PFA Management team.
• Maintain the enterprise controls library and standards aligned to MAS expectations and group standards.
• Act as senior escalation point for governance breaches and control breakdowns, driving triage, issue tracking and closure of systemic themes.
• Govern outsourced arrangements (including material outsourcing): accountability, performance and risk monitoring, issue management and service recovery/exit readiness, including BCP/DR.
• Ensure outsourcing meets MAS Outsourcing Guidelines across the lifecycle: due diligence, risk assessments, contracts, periodic monitoring, incident reporting and management information.
• Own key controls across sales, servicing, outsourcing and third-party distribution, including SOPs, process maps, evidence standards and record keeping.
• Monitor control performance through metrics, thematic reviews and periodic testing, and manage issues end to end.
• Uplift governance by simplifying policies, strengthening controls and tightening reporting discipline, and embed conduct and accountability.
• Oversee Enterprise Data Governance: own critical data elements, embed data quality controls in processes and outsourced arrangements, and monitor data issues through metrics and exception reporting.

Required profile

• Degree in Business, Finance, Law, Risk or a related field; controls, risk or audit qualification preferred.
• 10+ years in enterprise controls, operational risk, internal audit, controls testing or regulatory-facing governance in financial services (FA preferred).
• Strong grasp of MAS expectations, including the Outsourcing Guidelines, and ability to turn them into practical governance, controls and management information.
• Strong influence across functions and vendors, and strong writing and governance reporting for the CEO, Board and Audit Committee.