How to apply for Risk Consultant / Senior Risk Consultant

About AECOM

AECOM is a global infrastructure firm that describes its work as building sustainable legacies through infrastructure and environmental solutions. The role sits within AECOM's Integrated Programme Controls team, which supports major capital projects across the UK and globally. This is a fit for someone who wants to work on large infrastructure programmes rather than a single-sector or single-client role.

About the role

The Senior Risk Consultant implements and advises on risk management for AECOM's major infrastructure projects across multiple sectors. The role involves working with project teams, clients, and sub-contractors to assess risk exposure, apply governance, and produce reports that support senior decision-making. It also includes supporting bids and proposals and coaching staff in risk management practice.

A typical day

A typical day may include engaging with a project team on risk implementation, running or attending a risk workshop, and reviewing risk data for an assurance check. You may also draft a risk report for senior leaders or contribute risk input to a bid. The posting does not specify daily routines, so ask in the interview how the team splits time between project support, bids, and assurance.

Who AECOM is looking for

• Has hands-on experience implementing risk management on large capital or infrastructure projects, not just documenting risk registers.
• Is comfortable engaging senior stakeholders and clients directly, including in bid and proposal settings.
• Can perform risk assurance checks and judge the quality of risk management across a project or programme.
• Has experience producing risk reports and communicating risk data clearly to senior leaders.
• Has coached or mentored others in risk management methods and best practice.

Tips for this application

• Match your CV to the five listed duties: implementation, bid input, assurance checks, reporting to senior leaders, and coaching. Use those words where your experience fits.
• Name the sectors and project types you have supported, since AECOM covers a broad range of infrastructure sectors and wants cross-sector adaptability.
• Show any bid or proposal work you have contributed to, because this role includes direct risk input to secure new business.
• If you have worked with Integrated Programme Controls or programme-level risk (not just project-level), state that clearly and early.
• Note your location relative to AECOM's UK offices, since the posting is remote but anchored to UK offices and UK projects.

What to cover in your cover letter

['A specific example of implementing risk management on a major infrastructure project, including the governance you put in place.', 'An example of presenting risk data to senior leaders or clients and how it changed a decision.', 'Any experience contributing risk input to bids or proposals.', 'Your experience coaching or mentoring staff in risk management, since this is an explicit duty of the role.']

Research before applying

• AECOM's Integrated Programme Controls team and what it does, since this role sits inside it.
• The major infrastructure sectors AECOM works in across the UK, and which programmes are currently active.
• AECOM's stated approach to sustainable legacies and how risk management supports it.
• The UK offices AECOM lists in the posting, since the role is remote but tied to UK offices.

Likely interview topics

Based on the job description, expect questions about:

• How you have implemented risk management on a major infrastructure project from start to finish.
• How you assess the quality of risk management across a programme, including assurance checks.
• How you communicate risk data to senior stakeholders who are not risk specialists.
• Your experience providing risk input to bids and proposals.
• How you have coached or mentored colleagues in risk management best practice.

Common mistakes to avoid

• Treating this as a generic risk or compliance role. The posting is specific about infrastructure programmes, bids, assurance, and coaching.
• Only listing risk tools or certifications without showing how you applied risk management on real capital projects.
• Ignoring the senior stakeholder and client engagement part of the role and focusing only on technical risk analysis.