Job Summary:

We are seeking an experienced Enterprise Risk Management (ERM) Manager to lead the organization's risk governance, risk assessment, and resilience programs. The ideal candidate will have extensive experience in enterprise risk management, governance, compliance, internal controls, and business resilience within large enterprise environments.

This role will be responsible for establishing and enhancing enterprise-wide risk frameworks, identifying emerging risks across business functions, driving risk mitigation strategies, and partnering with senior leadership to strengthen organizational resilience and decision-making.

Key Responsibilities:

- Develop, implement, and continuously enhance the organization's Enterprise Risk Management (ERM) framework, policies, and governance processes.

- Identify, assess, and monitor enterprise-wide risks across operational, strategic, financial, regulatory, technology, cybersecurity, and third-party domains.

- Conduct enterprise risk assessments and maintain risk registers, risk heat maps, and mitigation plans.

- Define and track Key Risk Indicators (KRIs), risk appetite metrics, and risk reporting mechanisms.

- Evaluate emerging business, technology, and regulatory risks and recommend proactive mitigation strategies.

- Ensure alignment of risk management practices with corporate governance standards, regulatory requirements, and industry best practices.

- Partner with Internal Audit, Compliance, Legal, Information Security, Finance, and Business Functions to strengthen risk oversight.

- Support regulatory reviews, external audits, compliance assessments, and risk assurance activities.

- Review and assess the effectiveness of internal controls and recommend process improvements.

- Lead risk mitigation initiatives and oversee remediation programs for critical risk areas.

- Drive Business Continuity Management (BCM), Disaster Recovery (DR), Crisis Management, and Operational Resilience programs.

- Conduct scenario analysis, stress testing, and impact assessments for critical business processes and strategic initiatives.

- Establish frameworks to improve organizational preparedness and resilience against business disruptions.

- Prepare and present risk dashboards, reports, and recommendations to executive leadership, risk committees, and governance forums.

- Partner with business leaders to embed risk awareness and accountability across the organization.

- Facilitate risk workshops, awareness programs, and training sessions to promote a strong risk culture.

- Act as a trusted advisor to leadership teams on enterprise risk matters and strategic decision-making.

- Provide risk advisory support for digital transformation initiatives, business expansion programs, technology implementations, and organizational change projects.

- Evaluate strategic investments, new business initiatives, and operational changes from a risk perspective.

- Support leadership in developing long-term risk management and resilience strategies.

Required Skills & Experience:

- 10-15 years of experience in Enterprise Risk Management, Governance, Compliance, Internal Audit, Risk Advisory, or Internal Controls within large enterprise organizations.

- Strong understanding of ERM frameworks, risk governance, risk assessment methodologies, and control environments.

- Experience managing risks across operational, financial, technology, cybersecurity, regulatory, and third-party domains.

- Hands-on experience with Business Continuity Planning (BCP), Operational Resilience, and Crisis Management programs.

- Strong analytical, problem-solving, and decision-making capabilities.

- Experience preparing risk reports and presenting to senior leadership, executive committees, or board-level stakeholders.

- Strong stakeholder management and cross-functional collaboration skills.

- Knowledge of industry frameworks such as COSO ERM, ISO 31000, NIST, COBIT, ISO 22301, or equivalent is preferred.

Preferred Qualifications :

- Bachelor's degree required; Master's degree preferred.

- Professional certifications such as CRMA, CISA, CIA, CISM, CRISC, FRM, PRM, ISO 31000 Risk Manager, or equivalent are highly desirable.