Chris Williams

I am a Partner and co-leader of the Business Risk Services practice, working with large listed corporates and equivalent-scale organisations to help them understand, manage and gain assurance over their most significant risks.

My work spans the full breadth of Business Risk Services including internal audit co-sourcing and outsourcing, technology risk and controls assurance, cybersecurity advisory, programme assurance, ESG risk, and data governance. I bring a commercially grounded perspective to complex risk and assurance challenges.

With over 26 years' experience across practice and industry, I have deep expertise in technology risk, particularly IT general controls, cyber resilience, third-party risk and emerging technology. I take a particular interest in how technology and data-driven tools can transform the way organisations oversee and test their own controls, moving from periodic, point-in-time assurance towards more continuous, insight-led approaches. I work with clients to challenge conventional thinking about how risk oversight and internal audit functions are structured, resourced and delivered, and help them adopt models that are better suited to the pace and complexity of modern business.

I work across a wide range of sectors, with a particular focus on large retail, consumer and technology businesses, and lead a team of specialists who bring both technical depth and practical judgement to every engagement.