Risk Manager

About the Role

The Risk Manager is responsible for developing, implementing, and maintaining the organisation's enterprise risk management framework. The role identifies, assesses, monitors, and reports strategic, operational, financial, regulatory, and emerging risks, helping management make informed decisions and protect organisational assets, reputation, and objectives.

Key Responsibilities

• Develop and maintain the organisation's risk management framework, policies, procedures, and risk appetite statements.
• Facilitate risk identification, assessment, evaluation, treatment, and monitoring across business functions.
• Maintain the corporate risk register and ensure risks, controls, actions, owners, and due dates are current.
• Work with business leaders to identify key risks, assess control effectiveness, and develop mitigation plans.
• Prepare clear risk reports, dashboards, and presentations for senior management, executive committees, and the Board.
• Monitor key risk indicators (KRIs), control indicators, and emerging risk trends.
• Support business continuity, crisis management, incident reporting, and disaster recovery planning.
• Conduct risk reviews for major projects, business changes, new products, third-party suppliers, and strategic initiatives.
• Ensure alignment with relevant legal, regulatory, governance, compliance, and internal control requirements.
• Promote a strong risk-aware culture through training, guidance, and communication across the organisation.
• Liaise with Internal Audit, Compliance, Finance, Legal, Information Security, and external stakeholders as required.
• Review and recommend improvements to risk management processes, systems, and reporting practices.

Qualifications & Experience

• Bachelor's degree in Risk Management, Finance, Business Administration, Accounting, Law, Economics, or a related discipline.
• Professional certification in risk management, audit, compliance, or business continuity is desirable (e.g., CRISC, CISM, CISA, CIA, ISO 31000, IRM, FRM).
• Typically 5+ years of relevant experience in risk management, internal audit, compliance, governance, finance, or operational controls.
• Demonstrated experience designing or operating risk management frameworks and risk registers.
• Experience working with senior stakeholders and preparing reports for executive or Board-level audiences.
• Experience in a regulated, complex, or multi-functional organisation is preferred.
• Strong knowledge of enterprise risk management principles, including ISO 31000 or equivalent frameworks.
• Ability to identify, analyse, prioritise, and communicate complex risks clearly and pragmatically.
• Strong understanding of risk assessment methodologies, control design, control testing, and risk treatment planning.