Lead - Enterprise Risk Management

- Implement and maintain the overall ERM framework, including risk identification, assessment, monitoring, and mitigation.

- Conduct RCSA exercises, perform sample-based control testing, and validate control effectiveness.

- Analyse and report the organisation's risk profile, benchmark against regulatory requirements and industry best practices, and recommend improvements.

- Work with senior management to identify business risks, define mitigation controls, and maintain accurate entries in the risk register.

- Develop, manage, and publish ERM/ORM dashboards and reports to support ongoing monitoring.

- Track and close action plans, open issues, and initiatives arising from RCSA results, KRI monitoring, operational risk events, and audits.

- Prepare and present reports and decks for committees, top management, and other stakeholders.

- Review and update risk management policies, support ICAAP preparation, and monitor enterprise-level risk appetite.

- Manage the Outsourcing Risk Management framework and ensure compliance with internal policies.

- Support Business Continuity Management by updating BIA documents, Business Continuity Plans, and the Crisis Management Plan.