Executive, Risk Management is responsible to support the implementation, maintenance and continuous improvement of the Group's Enterprise Risk Management (ERM) and Business Continuity Management (BCM) frameworks through effective risk identification, assessment, monitoring, mitigation and reporting. The role also supports business impact assessments, business continuity planning, testing and crisis preparedness, while monitoring relevant regulatory and statutory requirements to strengthen the Group's resilience and business continuity.
Key Responsibilities:
A. Enterprise Risk Management
- -Support the implementation, maintenance and continuous improveemnt of the Group's ERM framework, policies, procedures and guidelines in accordance with approved requirements and recognised best practices.
- -Assist in reviewing and maintaining the Group's risk appetite framework, risk tolerance levels and related risk parameters.
- -Monitor and update Key Risk Indicators (KRIs) to support the identification, monitoring and reporting of risk exposures across the Group.
- -Assist in conducting risk assessments, data collection and analysis for enterprise-wide risk reviews, including emerging risks and scenario analysis.
- -Coordinate with business units to identify, document and monitor risks and the implementation of risk mitigation actions.
B. Business Continuity Management
- -Support the development, implementation, maintenance and continuous improvement of the Group's BCM framework, policies, procedure and guidelines.
- -Coordinate Business Impact Assessment (BIAs) with relevant departments to identify critical business functions, operational dependecies, resource requirements and acceptable recovery timeframes.
- -Facilitate the identification and assessment of potential threats, vulnerabilities and disruptions affecting the Group's business operations, personnel, facilities, information systems and critical resources.
- -Assist departments in developing, reviewing and maintaining Business Continuity Plans (BCPs) to support the continuity and recovery of critical business functions.
- -Coordinate the identification and documentation of Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), where applicable, and other recovery requirements with relevant business units and IT stakeholders.
Qualification
- -Bachelor's Degree in Risk Management, Finance, Business Administration, Economics, Law or a related discipline.
- -Minimum 3-5 years of relevant experience in risk management, governance, compliance or related discipline.
- -Basic understanding of risk management frameworks, regulatory requirements, and governance practices, with exposure to ESG principles being an added advantage.
- -Good analytical skills with the ability to support risk aseessments, evaluate risk exposures, and contribute to the development of mitigation measures.
- -Ability to anlyse risk-related data and support the preparation of risks reports, dashboards and Key Risk Indicators (KRIs).
- -Ability to support Business Impact Assessments (BIAs), the development and review of Business Continuity Plans (BCPs), and the coordination of business continuity exercises and testing.