In this RiskMasters episode, Julien Haye speaks with Jennifer Geary and Natalie McManus, co-authors of How to Be a ChiefCompliance Officer.

The conversation explains the Chief Compliance Officerrole as a leadership discipline rather than a control function.

It explores how compliance leadership shapesdecision-making, supports strategy, and embeds culture across the organisation.

Drawing on practical experience, the discussion reframescompliance as a capability that enables sustainable performance, trust, and long-term value.

🧠 What Does a Chief Compliance Officer Do?

A Chief Compliance Officer ensures that an organisationoperates within regulatory expectations while enabling effective decision-making.

The role combines governance, culture, and advisoryinfluence to shape how organisations manage risk, interpret rules, and minimise harm.

In practice, this means embedding compliance into strategy,operations, and everyday decisions rather than applying it after the fact.

🎯 What You’ll Learn

• Why every senior leader operates as a compliance leader inpractice
• How compliance mindset improves escalation and decisionquality
• What defines the Chief Compliance Officer role today
• How compliance leadership creates competitive advantage
• Why most compliance programmes fail to influence decisions
• How the IMPACT Wheel connects compliance into a system

⏱️ Episode Highlights

00:02 – Introduction and framing of the CCO role
00:54 – Compliance as leadership and social purpose
05:34 – Misconceptions about the Chief Compliance Officer
11:55 – Compliance as competitive advantage in practice
26:49 – The IMPACT Wheel explained
41:25 – First 90 days as a Chief Compliance Officer46:23 – Future capabilities: data, AI, and human judgement

📚 Related Resources

From Approval to Impact: Repositioning Risk Appetite as a Board ToolUnderstand how governance frameworks influence real business outcomes

What Would Change if Risk Identification Was Treated as a Strategic Advantage?Reframe how organisations surface and act on emerging risks

Psychological Safety in Risk Management
Why escalation, culture, and speaking up define effective governance

🎓 Download your CPD certificate:

The CPD Group – Accreditation #

Risk culture plays a central role in operational resilience, particularly in environments shaped by uncertainty and rapid change.

In this segment, Bruce McIndoe explains why governance structures in risk management and crisis management often appear robust but struggle under real conditions.

He highlights how organisations rely on defined roles, escalation paths, and reporting structures, yet face challenges in speed, integration, and decision-making when ambiguity increases.

The discussion explores how culture influences whether early warning signals are surfaced, how oversight shapes behaviour, and how operational resilience depends on the ability to act before information is fully validated.

Listeners will gain insight into:

• How risk culture influences operational resilience and crisis response
• Why governance structures provide confidence but not always effectiveness
• How speed and integration become critical under pressure
• Why oversight can delay escalation when certainty is prioritised
• What this means for enterprise risk management and decision-making

Enterprise risk management, crisis management, and governance frameworks often emphasise structure, reporting, and control.

Operational resilience depends on how organisations behave when conditions are uncertain.

This includes:

• how early signals are surfaced
• how ambiguity is treated in decision-making
• how quickly teams can act across functions

Strengthening these capabilities improves business resilience and response effectiveness.

This extract is taken from the full RiskMasters interview with Bruce McIndoe on operational resilience, risk management, and crisis decision-making.

Early warning signals in operational risk, enterprise risk management (ERM), and crisis management environments are often present before disruption becomes visible.

In this segment, Bruce McIndoe explains why these signals frequently fail to trigger action. He highlights how ambiguity, fragmentation, and competing interpretations prevent organisations from recognising signals as decision-relevant.

The discussion provides a practical lens on how risk monitoring and business continuity planning (BCP) can be strengthened by improving signal interpretation and escalation.

What You Will Learn

Listeners will gain insight into:

• Why early warning signals are often identified but not acted upon
• How enterprise risk management and crisis management processes interpret signals differently
• Why ambiguity prevents signals from becoming decision-relevant
• How fragmentation across functions delays escalation
• What this means for chief risk officers and business resilience leaders

Why This Matters

Many organisations invest in risk monitoring, enterprise risk management, and business continuity planning to strengthen resilience.

These capabilities depend on more than detection.

Operational resilience requires organisations to interpret signals under uncertainty, prioritise action, and respond before disruption escalates.

This is a critical capability for leaders responsible for risk management, crisis management, and business resilience.

Full Episode

This extract is taken from the full RiskMasters interview with Bruce McIndoe on operational resilience, enterprise risk management, and crisis decision-making.