Enterprise Risk Manager

Key Responsibilities

• Enterprise Risk Management

Develop, implement, and continuously enhance the Group Enterprise Risk Management framework, aligned with the organization’s strategy and business priorities.

Lead periodic enterprise-wide risk assessments across financial, operational, strategic, regulatory, technology, cyber, reputational, and compliance risks.

Develop and maintain the Group Risk Register, including risk categorization, ownership, impact/probability assessment, mitigation plans, and timelines.

Partner with business and functional leaders to identify emerging risks and establish appropriate mitigation and monitoring mechanisms.

Define and monitor Key Risk Indicators (KRIs) and provide early warning indicators to senior management.

Facilitate risk workshops and discussions with senior leadership to strengthen risk awareness and accountability across the organization.

Prepare periodic risk dashboards and reports for the Group CFO, senior management, Audit/Risk Committee and Board, as applicable.

• Internal Controls & Governance

Own and strengthen the Group’s Internal Controls Framework, ensuring appropriate financial and operational controls are designed and operating effectively.

Review key business processes to identify control gaps, process inefficiencies, potential financial leakage, and governance risks.

Establish and maintain Risk & Control Matrices (RCMs) across critical business processes.

Strengthen controls across revenue, billing, collections, payroll, procurement, treasury, expenses, financial reporting, and statutory compliance.

Conduct periodic control testing and ensure identified deficiencies are addressed through clearly defined remediation plans.

Drive standardization of controls and governance practices across different entities, businesses, and geographies.

Support the development and review of policies, SOPs, Delegation of Authority (DOA), and governance frameworks.

• Internal Audit & Assurance

Work closely with internal and external auditors to develop a risk-based audit approach and annual audit plan.

Coordinate internal audit activities and track closure of audit observations.

Challenge recurring audit findings and work with management to address underlying root causes rather than individual exceptions.

Monitor implementation of agreed corrective actions and escalate significant or overdue findings to the Group CFO.

Support investigations, special reviews, and management-requested audits where required.

Identify opportunities to leverage data analytics, automation and technology to improve continuous controls monitoring and risk visibility.

• Business & Leadership Partnership

Act as a trusted risk and controls partner to the Group CFO and senior leadership team.

Balance strong governance with commercial practicality, ensuring controls support rather than unnecessarily restrict business growth.

Provide an independent perspective on major business initiatives, transformation programs, new markets, acquisitions, systems implementations, and organizational changes from a risk and controls standpoint.

Build a strong culture of risk ownership and accountability across the organization.

Collaborate effectively across Finance, Operations, HR, Technology, Legal, Compliance and other business functions.

Candidate Profile Education & Professional Qualification

Chartered Accountant (CA) – strongly preferred.

Preference for candidates who have qualified CA within 2 attempts; maximum 3 attempts.

Additional qualifications/certifications such as CIA, CISA, CRMA or Risk Management certifications would be advantageous.

Experience

11–14 years of relevant post-qualification experience across Enterprise Risk Management, Internal Controls, Internal Audit and Governance.

Strong preference for candidates with a combination of Big 4 experience in Risk Advisory/Internal Audit/Internal Controls and subsequent in-house experience within a large MNC, diversified group or professionally managed promoter-led organization.

Demonstrated experience designing and implementing ERM frameworks, internal control frameworks, risk registers and RCMs.

Experience operating in complex, multi-entity and multi-stakeholder environments.

Exposure to international/multi-geography operations would be advantageous.

Experience presenting risk and controls matters to CFOs, CXOs, Audit Committees and/or Boards is preferred.

Key Competencies

Strong understanding of Enterprise Risk Management, Internal Controls and Internal Audit methodologies.

Strong financial and commercial acumen with the ability to understand risks beyond Finance.

Excellent analytical and problem-solving capability with the ability to identify root causes and recommend practical solutions.

Ability to challenge senior stakeholders constructively while maintaining strong working relationships.

Strong executive communication and presentation skills.

High degree of independence, integrity and professional judgment.

Ability to operate in a fast-paced, entrepreneurial and evolving business environment.

Strong ownership mindset with the ability to build frameworks and processes rather than simply operate existing ones.

Comfortable working directly with senior leadership and managing multiple priorities across the Group.