“Governance and risk management is not just about policing the business. It’s about engaging with stakeholders, understanding their challenges, and providing solutions from a risk and controls perspective”