David Lyons is a seasoned professional in the field of Risk Management and Internal Audit, currently serving as the Head of Risk Management for Global Controls at Morningstar. With over 12 years of diverse experience, including significant tenures at prestigious 'Big 4' firms in London...
David Lyons is a seasoned professional in the field of Risk Management and Internal Audit, currently serving as the Head of Risk Management for Global Controls at Morningstar. With over 12 years of diverse experience, including significant tenures at prestigious 'Big 4' firms in London and Sydney, David has honed his expertise in Enterprise Risk Management (ERM) across various sectors. His journey began as a Chartered Accountant (ACA - ICAEW) specializing in external and financial audits, but his passion for risk assurance led him to focus exclusively on internal audit and risk management.
In his current role, David leads the comprehensive risk management function for Morningstar, excluding DBRS, overseeing a wide array of risk domains. His responsibilities encompass strategic risk, operational risk, KYC/AML compliance, cyber and technology risk, regulatory compliance, and M&A risk. He plays a pivotal role in enhancing the organization's risk framework, spearheading Group-wide uplift projects, and ensuring robust control reviews. David's expertise extends to facilitating effective Board interactions and reporting, which are critical for informed decision-making at the highest levels of the organization.
David’s proficiency in compliance regulations, financial audits, and the COSO framework allows him to navigate complex regulatory landscapes while ensuring adherence to International Financial Reporting Standards (IFRS) and UK GAAP. His ability to present proposals effectively and document process flows has made him a trusted advisor within the organization. As he continues to drive risk management initiatives at Morningstar, David remains committed to fostering a culture of risk awareness and resilience, ensuring the company not only meets regulatory requirements but also thrives in a dynamic business environment.
