EXECUTIVE - GOVERNANCE, RISK AND COMPLIANCE (RISK & COMPLIANCE) (EG08)

Job Description

Job Purpose

Execute and coordinate the day-to-day implementation of the Group’s risk management and business continuity activities, including risk assessments, maintenance of risk registers, and ERM system administration.

Carry out risk reporting, monitoring, and Business Continuity Management framework upkeep by ensuring accurate documentation and timely reporting in line with established policies and standards.

Responsibilities

1. Execute Group-wide risk management programmes in line with established frameworks, guidelines, and governance requirements.

2. Coordinate half-yearly risk assessment exercises, including preparation, facilitation support, documentation, and follow-up actions.

3. Develop, track, and analyse risk indicators to support meaningful risk monitoring and reporting.

4. Track risk mitigation action plans, monitor progress, and flag delays or gaps in implementation.

5. Maintain and update risk registers to accurately reflect current risk exposures and mitigation status.

6. Review and maintain the Enterprise Risk Management (ERM) Framework, including likelihood, impact, risk indicators, and risk tolerance parameters.

7. Administer and maintain the ERM system, including system enhancements, upgrades, and user support.

8. Develop, maintain, and update Business Continuity Management (BCM) frameworks, policies, and standard operating procedures.

9. Coordinate business continuity plan reviews, business continuity testing exercises, and Business Impact Analysis (BIA) activities.

10. Prepare timely and accurate risk and BCM reports for stakeholders and execute ad-hoc assignments as directed.

Qualification and Experience

1. Bachelor’s Degree in Risk Management, Accountancy, Finance, Law, Business Administration, or a related discipline.

2. Possess a professional risk management certification, which is an added advantage.

3. Minimum of 2 years of relevant working experience in risk management, internal audit, or a similar field.

4. Demonstrate sound understanding of risk management fundamentals, including Enterprise Risk Management (ERM) and Business Continuity Management (BCM).

5. Apply working knowledge of recognised risk management frameworks and methodologies, including ISO 31000:2018 Risk Management – Principles and Guidelines and ISO 22301 Business Continuity Management Systems.