Full Time Head, Investment - Transactional Risk Jobs, in Sime Darby Property Selangor - Maukerja

Job Purpose

• Lead the IAM risk function as an independent second-line oversight and advisory role, covering investment, transaction, fund management, asset management and retail-related risks.
• Develop and enhance IAM risk frameworks, methodologies, reporting and escalation processes in alignment with the Group ERM Framework, Risk Appetite Framework and governance requirements.
• Provide constructive challenge and risk insights to support Management, CRICO and relevant governance committees in making informed decisions on key IAM matters.
• Lead the IAM risk team to deliver timely risk assessments, monitoring, reporting and advisory support while ensuring clear first-line ownership of risks and controls by the business.

Job Responsibilities

Investment and Asset Management (IAM) Risk Governance and Framework

1. Assist the Chief Risk, Integrity and Compliance Officer (“CRICO”) in leading the Group’s Investment and Asset Management risk management agenda and maintaining an effective second-line oversight model.
2. Develop, implement, maintain and periodically enhance the Group IAM Risk Framework, policies, methodologies, standards, taxonomies and reporting requirements. This includes establishing or enhancing risk standards and processes that are effective and efficient in identifying, preventing, detecting, monitoring and mitigating risk events.
3. Ensure IAM risk management frameworks, methodologies, reporting requirements and escalation protocols are aligned with the Group Enterprise Risk Management Framework, Group Risk Appetite Framework, approved governance structure, internal control expectations and applicable regulatory or governance requirements.
4. Define and maintain clear IAM risk roles and responsibilities in line with the three-lines model, ensuring first-line ownership of risks and controls maintained at management and operational level, second-line oversight and challenge provided by GRM, and third-line independent assurance performed by GCAD and/or other external assurance providers.
5. Establish governance processes, escalation protocols, approval authorities and reporting standards for IAM risk matters across the Group.
6. Coordinate IAM risk activities with Group Risk Management to ensure consistent methodology, timely escalation and clear accountability for risk ownership by the relevant business and operational units.
7. Serve as the IAM-focused second-line coordination point for risk activities undertaken by business units and specialist functions, promoting consistency of methodology, avoiding duplication and ensuring material matters are escalated through the approved governance structure.

Risk Identification, Assessment and ERM Integration

1. Oversee the identification and assessment of IAM risks across IAM’s business, support and corporate functions.
2. Facilitate and independently challenge IAM risk assessments, including inherent risk, control assessment, residual risk, likelihood, impact and target risk positions, to ensure they are robust, evidence-based and reflective of the Group’s actual risk exposures.
3. Coordinate the integration of IAM risk assessments, incidents, KRIs and emerging risk themes into the Group Enterprise Risk Management process, including aggregation of cross-functional exposures and identification of themes that may elevate to enterprise-level risks.
4. Lead risk workshops, thematic reviews, structured risk identification programmes, briefings and targeted training to strengthen IAM and enterprise risk visibility, risk ownership and capability across Management, Risk Champions and operational teams.
5. Review and enhance risk training programmes for Risk Champions, operational teams and other relevant stakeholders to ensure content remains practical, current and aligned with the Group’s risk management expectations.
6. Ensure IAM risk assessments, risk registers and related action plans are reviewed, updated and signed off on a periodic basis and whenever there are material business changes, acquisitions, projects, investments, divestments or strategic initiatives.
7. Work with management to ensure new or changing risks are appropriately mitigated and embedded into business processes, systems and decision-making arrangements.
8. On a continuous basis, identify and analyze areas of potential risk to the assets, earning capacity, or success of the Group.
9. Conduct an annual high-level review of threats and opportunities in line with the latest approved Strategy Blueprint, ensuring IAM-level enterprise risks are identified, assessed and supported by appropriate risk treatment plans.

Risk and Control Self-Assessment, Risk Appetite, KRI and Monitoring

1. Oversee the design and implementation of IAM’s risk toolset, including Risk and Control Self-Assessment, key risk indicators, incident and loss event management, root cause analysis, issue tracking and scenario analysis for material risk exposures.
2. Develop (through working with Management), review and maintain IAM risk KRIs, monitoring thresholds, tolerance limits and escalation triggers aligned to approved risk appetite and tolerance levels.
3. Monitor IAM risk exposures and risk appetite utilisation, investigate breaches, deteriorating trends, recurring control failures and recurring incidents, and recommend appropriate management action.
4. Ensure quality, consistency and timely update of risk registers, RCSA outputs, KRI reporting and supporting evidence by risk owners, process owners and risk coordinators.
5. Lead scenario analysis, emerging risk reviews and severe-but-plausible event assessments to support management decision-making, risk appetite review and resilience planning.

Operational Incident, Loss and Issue Management

1. Establish or support standards for capturing, classifying, analysing and escalating IAM-related risk events, including approval breaches, valuation exceptions, investment execution issues, counterparty concerns, fund or asset performance incidents, retail asset disruptions, control failures and recurring issues.
2. Coordinate or review root cause analysis for material IAM-related incidents and identify systemic weaknesses, control gaps, recurring themes and lessons learned.
3. Monitor remediation of incidents, control deficiencies and agreed corrective and preventive actions, including escalation of overdue, inadequate or ineffective remediation to CRICO and the relevant governance forum.
4. Provide independent review and challenge over the governance of risk acceptance, temporary exceptions, unresolved control weaknesses and material risk disputes, where applicable.

Operational Resilience and Business Continuity

1. Provide second-line oversight over business continuity and operational resilience arrangements for IAM-related activities,
2. Assess resilience risk arising from critical investment, fund management, asset management and retail operations processes; key dependencies; outsourced service providers; technology platforms; service continuity arrangements; and resilience testing outcomes.
3. Recommend mitigation and enhancement measures to strengthen business continuity, crisis response and operational resilience capabilities.
4. Participate in or support crisis management, incident response and resilience exercise reviews from a second-line oversight perspective.

Project, Investment and Third-Party Risk Oversight

1. Review risk assessments for major proposals, investments, divestments, acquisitions, joint ventures, fund management initiatives and asset management strategies prepared by IAM, Strategy or Operational Units, and provide independent challenge on strategic fit, financial assumptions, valuation basis, funding structure, counterparty risk, execution risk, regulatory exposure and downside scenarios.
2. Provide independent risk views, advice and recommendations on key investment, transaction, fund management and asset management matters for CRICO, Senior Management and the Board, including highlighting key assumptions, risk trade-offs, mitigation adequacy, residual risk exposure and matters requiring escalation or decision.
3. Provide timely escalation to CRICO and GMD & CEO, where appropriate, on material risk matters, unresolved risk issues, significant deviations from approved risk appetite, disputes on risk assessment outcomes, or matters that may affect investment, fund management or asset management decisions.
4. Provide second-line risk oversight over major investment, transaction, fund management, asset management and operational activities within the IAM scope, including independent challenge of key assumptions, exposures, mitigation adequacy and escalation requirements.
5. Support the implementation of third-party risk management practices and monitor material exposures arising from tenant and investment concentration, financial stability, operational capability, service delivery, compliance performance and supply chain disruption.
6. Review outsourcing arrangements, fund service providers, property or asset managers, valuers, counterparties, joint venture partners and other critical third parties from an IAM risk perspective, focusing on financial stability, operational capability, governance, service continuity, concentration exposure and adequacy of mitigating controls.
7. Participate in relevant project, investment, operational, strategy or governance meetings where IAM risk input, independent challenge or escalation advice is required.

Regulatory Alignment, Governance Reporting and Assurance Support

1. Monitor relevant regulatory, governance and industry developments affecting IAM and ensure the IAM risk practices remain aligned with Bursa Malaysia requirements, the Malaysian Code on Corporate Governance, the Group’s risk management and internal control obligations, and other applicable laws, regulations and recognised risk management standards.
2. Support CRICO, Senior Management and Board Committees in discharging their oversight responsibilities over IAM risk management, including preparation of risk reports, analysis, validation outputs, escalation papers and governance updates.
3. Escalate material IAM risk exposures, significant incidents, repeated risk appetite breaches and unresolved control weaknesses to CRICO and the relevant governance forum in accordance with approved escalation protocols.
4. Maintain documentation, reporting records and evidence trails sufficient to support internal audit, regulatory review, external assurance and the Group’s annual governance disclosures relating to risk management and internal control.
5. Coordinate responses on IAM risk matters for regulatory reviews, assurance engagements and internal stakeholder requests, as required.

Risk Culture, Capability Building and Stakeholder Engagement

1. Develop and implement operational risk training and awareness programme (annually or otherwise) covering operational risk fundamentals, RCSA, KRIs, incident management, risk appetite, escalation protocols, emerging risks, business continuity and other relevant topics.
2. Establish and oversee a network of risk coordinators or risk champions across the Group and provide ongoing coaching, guidance and quality review to strengthen first-line risk management capability.
3. Promote strong risk culture, transparent reporting and timely escalation of risk issues, while supporting management in embedding risk considerations into planning, decision-making and operational execution.
4. Provide updates and briefings to Senior Management and relevant Board or Management Committees on operational risk themes, emerging developments, industry trends and governance expectations, where appropriate.
5. Assist and contribute to the establishment and maintenance of GRM communication, tools and facilitates using appropriate ERM methodologies, tools and techniques.

Risk Systems, Data and Reporting

1. Lead the development, enhancement and business oversight of risk management systems, data structures, dashboards and reporting solutions supporting IAM risk, KRIs, RCSA, incident management and enterprise risk reporting.
2. Define business requirements, reporting standards and data governance expectations to ensure risk information used for management and Board reporting is complete, accurate, consistent and decision useful.
3. Prepare or review high-quality IAM risk reports, dashboards, validation outputs and analysis for CRICO, Senior Management, Management Committees and Board Committees on a timely basis.
4. Promote continuous improvement in risk reporting, analytics, automation and technology-enabled monitoring, where appropriate and proportionate to the Group’s risk profile and governance requirements.
5. Assist CRICO or Management to develop tools and system which support the risk environment. Manage and drive implementation of tool and systems.

People, Leadership and Department Administration

1. Lead and manage the IAM GRM team to deliver the approved mandate, annual plan, priorities and key performance indicators, and provide regular updates to CRICO on progress, issues and resource requirements.
2. Support the development of the annual operational risk plan, budget and resource requirements, including monitoring of expenditure against approved budgets and timely escalation of material variances.
3. Ensure assignments are executed objectively, independently and to a high standard of quality, consistency and professionalism.
4. Develop team capability through coaching, performance management, succession planning and targeted development to ensure continuity and enhancement of the function.
5. Perform other duties as assigned by CRICO from time to time, consistent with the role and the Group’s governance requirements.

Job Requirements

Education and Professional Qualifications

1. Possess at least a Bachelor’s Degree or professional qualification in Finance, Accounting, Economics, Business, Real Estate, Risk Management, Investment, Fund Management, Law, Engineering, Data Analytics or a related discipline from a recognised university.
2. A postgraduate qualification such as MBA, Master’s in Risk Management, Finance or Business Administration would be an advantage.
3. Professional certifications such as FRM, PRM, CRM, CIA, CISA, CFA, ACCA or equivalent would be an added advantage, depending on the candidate’s background and functional exposure.

Relevant Experience

1. Minimum 10 to 12 years of relevant experience in investment, transaction evaluation, fund management, asset management, corporate finance, risk management, governance advisory or related functions, preferably with exposure to real estate, infrastructure, property development, private markets, retail assets or portfolio management, with at least 3 to 5 years in a managerial or leadership role.
2. At least 3 years in current position (SMII or SM1).
3. Real estate, fund management and asset management related experience will be an added advantage.
4. Demonstrated experience in designing, implementing and enhancing risk management frameworks, methodologies and reporting practices in a complex corporate environment
5. Practical experience in risk and control self-assessment, incident and loss management, key risk indicators, root cause analysis, scenario analysis, operational resilience, business continuity and issue remediation monitoring.
6. Experience in working with senior management, cross-functional stakeholders and governance committees, including preparation of concise, decision-useful reports and escalation papers for management and Board-level review.
7. Experience in sectors with significant real estate related industry, such as property development, construction, infrastructure, asset management, shared services, large corporates or regulated industries, would be an advantage.