Lead Risk Management

Lead the identification, assessment and monitoring of operational and information technology risks across business processes, applications, infrastructure, projects and strategic initiatives. Ensure material risks are evaluated consistently and escalated to the appropriate authority. Drive the enterprise-wide Risk and Control Self-Assessment process in coordination with business, operations and technology functions. Review the completeness and quality of assessments and ensure that risk registers are accurate, current and supported by appropriate evidence.

Define, review and monitor Key Risk Indicators for material risk areas. Analyse trends, challenge threshold levels and ensure breaches or adverse movements are promptly reported, escalated and addressed through time-bound corrective actions. Conduct process walkthroughs and detailed risk assessments to understand workflows, dependencies, failure points and existing controls. Recommend improvements to strengthen control design, operating effectiveness and accountability across relevant functions.

Oversee the operational risk incident management process, including incident identification, classification, impact assessment, reporting and closure. Review root cause analysis, challenge corrective and preventive actions, track action items and escalate delays or recurring incidents. Assess operational and technology risks associated with new products, system implementations, major enhancements, process changes, outsourcing arrangements and other business initiatives.

Ensure identified risks are addressed before implementation or formally accepted by the appropriate authority. Develop risk mitigation plans jointly with business, operations and technology teams. Define clear actions, owners and target dates, monitor progress and escalate overdue or ineffective actions to senior management and relevant governance forums. Partner with Technology, Information Security, Compliance, Internal Audit and other control functions to promote a coordinated approach to risk management.

Facilitate information sharing, avoid duplication and ensure consistent assessment and treatment of interrelated risks. Support the development, implementation and periodic review of the enterprise Risk Appetite Framework. Assist in defining suitable risk appetite statements, metrics, thresholds and escalation requirements for operational and technology risks, aligned with the organisation’s objectives and regulatory expectations.

Prepare accurate and timely risk reports, dashboards and management updates for senior management and relevant committees. Provide clear analysis of the organisation’s risk profile, significant incidents, emerging risks, KRI breaches, control weaknesses and mitigation status to support informed decision-making. Maintain appropriate records of assessments, findings, approvals and closures to demonstrate effective oversight, traceability and compliance with the organisation’s risk management framework.

Requirements Demonstrated experience in Operational Risk Management and/or Technology Risk Management. Strong knowledge of risk management frameworks, governance practices and internal control environments. Experience in conducting Risk and Control Self-Assessments (RCSA), maintaining risk registers and monitoring Key Risk Indicators (KRIs). Ability to perform process walkthroughs, identify risk exposures and evaluate control effectiveness.

Experience managing operational risk incidents, root cause analysis and remediation tracking. Knowledge of operational and technology risk considerations relating to system implementations, process changes, outsourcing arrangements and business initiatives. Ability to develop, monitor and drive risk mitigation and corrective action plans across multiple stakeholders. Strong understanding of Risk Appetite Frameworks, risk metrics, thresholds and escalation requirements.

Experience working with Technology, Information Security, Compliance, Internal Audit and business teams within a three-lines-of-defence environment. Strong analytical, stakeholder management, communication and report-writing skills. Ability to prepare risk dashboards, management reports and governance committee presentations. High attention to detail with strong documentation and record-management capabilities.