Dr Jimi Hinchliffe

Experience & perspective

Dr Jimi Hinchliffe is a senior risk and regulatory consultant with more than 25 years’ experience across financial services supervision, banking and advisory work. A full-time independent consultant since 2016, he specialises in risk frameworks, operational risk management (ORM), operational resilience, third-party risk management (TPRM) and regulatory affairs.

Jimi spent nearly a decade at the UK Financial Services Authority (FSA), where he held roles spanning bank and investment firm supervision, operational risk policy and Basel II implementation. As an operational risk policy specialist, he represented the FSA on the European Commission’s Working Group on Other Risks (WGOR). He subsequently served as a Basel II technical expert before leading the FSA’s Basel II implementation team. In this capacity, he represented the UK regulator at numerous international Basel supervisory colleges, including those held in the United States, Canada, Japan and across the European Union.

Following his regulatory career, Jimi held senior regulatory affairs and compliance positions at Bank of Tokyo-Mitsubishi UFJ (MUFG), including Head of Policy, Risk and Regulatory Affairs and, subsequently, Executive Director and Head of EMEA Regulatory Affairs. He also held a group role as Executive Director in the MUFG Group’s Global Regulatory Affairs Office, bringing an international perspective to regulatory strategy, engagement and implementation.

As Regional Head of Compliance for the Middle East at MUFG, Jimi led the development and implementation of a comprehensive compliance framework for the bank’s Dubai operations. He also worked closely with the EMEA Risk team to design and implement an enterprise-wide risk appetite framework during a period of heightened regulatory scrutiny.

His consulting work focuses on turning regulatory expectations into practical frameworks, assessments and implementation programmes. He has supported banks and other financial institutions in understanding new requirements, documenting existing practices, identifying gaps and delivering proportionate remediation.

Jimi has published articles on operational risk, including in refereed journals, and spoken at Risk EMEA, Op Risk Europe and New Generation Operational Risk. At the latter, he led full-day workshops on operational risk management and operational resilience. He has also developed and delivered specialist TPRM and operational resilience training for Risk Learning, including courses for practitioners, regulators and central banks.

He is a member of CeFPro’s advisory board for non-financial risk management and a member of the Securities and Investment Institute. He was made a Fellow of the Institute of Operational Risk (IOR) in 2016 and chaired the IOR’s England and Wales chapter for four years from 2017. With Andrew Sheen, he co-authored Integrated Operational Risk Management (Wiley, 2025) and is co-author of the forthcoming Holistic Enterprise Risk Management.

Specialist expertise

• Operational risk frameworks, RCSA and risk governance
• Operational resilience and regulatory implementation
• Third-party risk management, outsourcing and SS2/21
• Regulatory affairs, supervisory engagement and remediation
• Risk appetite, GRC systems and professional training

Selected relevant experience

• Played a leading role in programmes delivering PRA SS2/21 third-party risk management requirements for the UK subsidiaries of two Asian banks.
• Provided operational resilience regulatory advisory services to UK entities (subsidiaries and branches) of six Asian banks.
• Led multiple maturity assessments and regulatory gap analyses for banking and investment firm clients, translating findings into practical action plans.
• Served for almost three years as Head of Operational Risk for a £20 billion defined-benefit pension fund, developing its ORM framework, enhancing TPRM, selecting and implementing a GRC system and chairing the monthly Operational Risk Committee.
• Provided broad-based risk management support to a large USA-headquartered healthcare services company; services included maturity assessment, advisory support on addressing gaps, and challenging the approach.
• Ongoing support to an EU-headquartered large commercial bank on risk management and regulatory affairs through a programme of workshops through 2025-26 and ongoing.
• Worked with three GRC vendors to develop or enhance functionality covering operational resilience, conduct risk and TPRM.
• Delivered training and coaching to the Boards of UK bank subsidiaries on operational resilience, TPRM and ORM.
• Developed and delivered specialist training on ORM, NFR, TPRM, and operational resilience for banks, financial services practitioners, regulators and central banks, including directly and through training providers such as Risk Learning, CTP and the Building Societies Association.

Independent consulting company

NJ Risk and Regulatory Consulting Ltd

Established in 2016, NJ Risk and Regulatory Consulting Ltd provides specialist operational risk and regulatory advisory services, with an emphasis on practical, proportionate solutions.

JADEtc Academy is a collaborative consulting and training brand. The relevant contracting entity is confirmed in each client proposal or engagement agreement.

← Return to all partners