Skip to content
Go to homepageDrova logo

Sydney, Australia

Andrew Lingley

Head of Growth & Marketing Operations, Drova

Shares real-world insight on governance, accountability, and resilience, drawn from direct engagement with boards, executives, and regulators.

Dad of two, deeply helpful to his colleagues, and relentlessly action-oriented.

Andrew Lingley portrait

Contact

Compliance fails when it lives in policy. The organisations that win under scrutiny are the ones that make ownership clear, embed discipline into the operating rhythm, and prove resilience in how work actually gets done.

Andrew Lingley

Head of Growth & Marketing Operations, Drova

About Andrew

Andrew Lingley is Head of Growth and Marketing Operations at Drova. He brings practitioner-informed insight on governance, operational resilience, and organisational execution, shaped by direct engagement with boards, executives, risk leaders, and regulators.

Andrew focuses on how regulatory expectations and risk intent translate into day-to-day operating reality. He also leads Drova's product-led growth initiatives, focused on turning complex governance requirements into practical in-product guidance and adoption.

He previously served as Deputy Chair of the Association of Professional Compliance Consultants (APCC) Operational Resilience Working Group, where regulators joined practitioner forums to hear industry research, operational insights, and implementation challenges tied to FCA and PRA and Bank of England operational resilience requirements.

Alongside his executive role, Andrew has held multiple non-executive and board positions in the not-for-profit sector, contributing to risk assessments, risk appetite statements, regulatory and ACNC compliance, strategic and operating planning, board mergers, and grant and fundraising governance.

At Drova, Andrew also helps lead industry outlook work, most recently across operational resilience, NDIS, and financial services, turning cross-sector patterns and practitioner evidence into clear guidance leaders can use.

Andrew is a Certified GRC Professional (OCEG), a Member of the Corporate Governance Institute, and holds a Master's in Leadership, Administration and Governance.

Andrew's focus areas

Regulatory and standards compliance

Governance and reporting

Integrated GRC and compliance operating models

Risk management and risk appetite in practice

Operational resilience and business continuity

AI governance under board and regulatory scrutiny

Mutuals and credit unions governance patterns

CPS 230 readiness and uplift programs

FAR accountability, ownership, and controls

Practitioner playbooks and implementation lessons

How Andrew helps

Makes regulatory and standards compliance clearer by translating expectations into practical implications for leaders and operators.

Shares practitioner evidence and cross-sector insights from live forums with regulators, executives, and risk leaders.

Helps leaders communicate compliance and resilience credibly through clearer governance narratives and reporting signals.

Publishes practical playbooks and outlooks that help organisations move beyond policy and embed resilience and sustainability into day-to-day operations.

Latest from Andrew Lingley

Stories27
ASRS is more than emissions: How finance teams can lead the climate conversation

Regulatory & Standards Compliance

ASRS is more than emissions: How finance teams can lead the climate conversation

ASRS moves climate reporting into finance. CFOs now own governance, risk, controls and evidence, so emissions reporting becomes defensible and decision-ready.

11 Feb 2026

What AASB S2 really means for CFOs (and how to stay in control)

Regulatory & Standards Compliance

What AASB S2 really means for CFOs (and how to stay in control)

AASB S2 turns climate disclosure into a core finance obligation. This CFO checklist makes the 80+ clauses auditable, clarifying ownership, evidence, and assurance-ready reporting.

15 Jan 2026

SYSC15A and the credibility gap: Why are resilience plans falling short under scrutiny?

Regulatory & Standards Compliance

SYSC15A and the credibility gap: Why are resilience plans falling short under scrutiny?

There is a difference between having a plan and being ready to prove it.
Under the FCA’s PS21/3 standard, many firms look compliant on paper but fall short under scrutiny. The planning phase is over. The focus now is on outcomes and evidence. The FCA expects firms to show how they will keep services running during disruption, with proof that is current, complete, and connected. Anything less reveals a credibility gap that regulators are ready to test.

21 Aug 2025

Third-party resilience under PS21/3: What the FCA wants you to prove - and the simplest way to prove it

Regulatory & Standards Compliance

Third-party resilience under PS21/3: What the FCA wants you to prove - and the simplest way to prove it

Third-party resilience is now a board-level accountability.
Under the FCA’s PS21/3 standard, outsourcing doesn’t remove responsibility. Firms must prove they can withstand supplier disruption and stay within impact tolerances. That means mapping dependencies, testing scenarios, and holding evidence that stands up to scrutiny. When failure hits, the regulator won’t ask who caused it; they’ll ask why you weren’t ready.

21 Aug 2025

Regulated financial executives reviewing CPS 230 readiness dashboards

Regulatory & Standards Compliance

'We’ve got it covered': The four most expensive words in CPS 230 compliance

CPS 230 moved operational resilience from intent to proof. “We’ve got it covered” now signals risk unless board-ready evidence is on hand.

20 Aug 2025

Regulatory Retreat? Why Markets Move Faster | Drova

Regulatory & Standards Compliance

Regulatory retreat? Why markets move faster

There’s a sense of regulatory whiplash in the world of corporate sustainability.

19 Mar 2025

GRC: From Brakes to Strategic Steering | Drova

Regulatory & Standards Compliance

GRC is no longer the brakes. It’s the strategic steering wheel.

Learn how GRC can drive business strategy and corporate culture to create a competitive advantage from compliance requirements and actions.

20 Feb 2025

Drova’s 2024 Highlights & Resources | Drova

Regulatory & Standards Compliance

Drove it home: 2024, that's a wrap!

Here are our top 10 most popular resources your peers found most valuable this year, from regulation to resilience and beyond.

19 Dec 2024

Key Issues Facing Mutual Banks: And What NOT To Do | Drova

Regulatory & Standards Compliance

Key issues facing mutual banks: And what NOT to do

Explore the challenges faced by mutuals in today's financial landscape and the implications of inadequate risk management and governance structures.

4 Sept 2024

What Mutuals Did Right During the Financial Crisis | Drova

Regulatory & Standards Compliance

Mutuals & the GFC: Resilience in a financial crisis

Ben Woods dissects the resilience of Australian Mutuals, and the benefits of member-centricity and prudent risk management.

4 Sept 2024

Ditch Spreadsheets for Better GRC Reporting | Drova

Regulatory & Standards Compliance

From spreadsheets to GRC software: Better reporting ahead

Michael Rasmussen explains why you should move towards integrated GRC management solutions that provide audit trails, consistency, & integrated reporting.

4 Sept 2024

Trust and Resilience In Finance: Lessons From Apple| Drova

Regulatory & Standards Compliance

Trust, integrity & cybersecurity: Apple or banks?

Apple's new high yield savings account attracts $1 billion in 4 days - what can financial institutions learn?

4 Sept 2024

2024 Risk Outlook: Handle the Unknown | Drova

Regulatory & Standards Compliance

Global risk landscape 2024: How to tackle what you can’t see

The World Economic Forum's inaugural Chief Risk Officers Outlook presents a comprehensive perspective of potential global risks.

4 Sept 2024

What Not to Do in Corporate Governance | Drova

Governance & Reporting

When corporate governance falls apart: Four examples of what not to do

Corporate governance failures uncovered lessons learned and why oversight is critical to long-term performance.

4 Sept 2024

Driving Operational Resilience from the Board Down | Drova

Regulatory & Standards Compliance

How to convince the Board on resilience's value

Driving operational resilience should be high on your agenda. Here are a few ways to articulate the significance of operational resilience to your Board.

4 Sept 2024

New Rules Expand Operational Resilience Scope | Drova

Regulatory & Standards Compliance

The expanding scope of operational resilience regulatory requirements

Learn how operational resilience regulatory requirements are expanding on a global scale and how this will impact your organisation.

4 Sept 2024

Would Your Risk Documentation Hold Up in Court? | Drova

Regulatory & Standards Compliance

Would your risk documentation hold up in court?

You need to be able to defend your GRC management in a litigious environment. Evidence alone is no longer enough for regulators & auditors.

4 Sept 2024

What Small Businesses Need to Know About Compliance | Drova

Regulatory & Standards Compliance

What small businesses need to know about compliance

Smaller businesses still have plenty of compliance obligations to meet, with fewer staff to help you manage them.

4 Sept 2024

GRC Spreadsheets and the Complexity Barrier | Drova

Regulatory & Standards Compliance

Have your GRC spreadsheets hit the complexity barrier?

Using spreadsheets and documents across disparate systems to manage risk processes is ‘the inevitability of failure’.

4 Sept 2024

Ireland’s Anti-Money Laundering Ambitions | Drova

Regulatory & Standards Compliance

Inside Ireland’s bid to become Europe’s anti-money laundering hub

We delve into Ireland's strategic bid to host AMLA and the transformative impact it could have on the European financial regulatory landscape.

4 Sept 2024

Four Ways GRC Can Support Operational Stability | Drova

Regulatory & Standards Compliance

Four ways GRC can support operational stability

Well-targeted GRC strategies can help organisations break down silos, improve communication and reduce interdepartmental tensions.

4 Sept 2024

Corporate Governance: A Living Legacy | Drova

Governance & Reporting

A history of corporate governance and why it remains so important

Learn more about the rich history of corporate governance and why it is still such a critical concern for businesses today.

4 Sept 2024

220 Daily Regulatory Shifts: Stay Ready | Drova

Regulatory & Standards Compliance

220 daily regulatory changes? Here's how to keep up

With 220 regulatory changes globally, finanical services firms can stay informed and compliant with one central, intelligent GRC platform.

4 Sept 2024

Avoiding Silos in Risk-Connected Environments | Drova

Regulatory & Standards Compliance

Avoiding silos in a risk-connected world

Break down silos and boost resilience in a connected risk landscape. Discover how integrated GRC systems drive smarter, stronger operations.

4 Sept 2024

UK Regulators Push Financial Resilience | Drova

Regulatory & Standards Compliance

UK Regulators’ bold plan to boost financial sector resilience

The Bank of England, PRA, and FCA’s joint proposal sheds light on the crucial aspects of fortifying critical third parties in the UK's financial sector.

4 Sept 2024

Interconnected GRC concept illustration

Regulatory & Standards Compliance

Achieving 360° GRC: Interconnectedness is the key to confidence

360° GRC means every policy, risk, control, and incident connects—delivering confidence when regulators or boards ask for proof.

3 Sept 2024

Disability support team reviewing service strategy

Regulatory & Standards Compliance

Navigating the future of disability services

NDIS providers face new compliance standards, margin pressure, and stakeholder demands—success hinges on integrated governance and risk practices.

3 Sept 2024