Job Purpose
Supports the implementation of HMMME’s Enterprise Risk Management (ERM) programme by identifying, assessing, monitoring, and reporting business risks. Maintains the enterprise risk register and Key Risk Indicators (KRIs), follows up on risk mitigation plans, and prepares risk reports for the Risk Manager, senior management, and Audit & Risk Committee (ARC).
Key Responsibilities
- Risk Identification & Assessment: Conduct risk assessments, facilitate risk workshops, identify potential risks, evaluate their impact, and recommend mitigation measures.
- Risk Register & Monitoring: Maintain the enterprise risk register, monitor Key Risk Indicators (KRIs), track risk trends, and identify emerging risks.
- Risk Mitigation: Follow up with risk owners on mitigation plans, monitor progress, and escalate overdue or critical actions.
- Risk Reporting: Prepare risk reports, dashboards, heat maps, and presentations for management and the Audit & Risk Committee.
- Business Continuity: Support the Business Continuity Management (BCM) programme, including business impact assessments and continuity testing.
- Insurance Coordination: Support corporate insurance activities, maintain exposure data, and coordinate with insurance brokers when required.
- Risk Culture: Promote risk awareness across departments and support training and knowledge-sharing initiatives.
- Cross-Functional Collaboration: Work closely with Finance, Compliance, Internal Audit, Operations, and other departments to strengthen risk management practices.
- Ensure all activities comply with the company's ERM policies, procedures, and governance requirements.
Job Requirements
- Bachelor's degree in Finance, Engineering, Business Administration, or a related field.
- Minimum 4–7 years of experience in risk management, internal audit, or assurance within a complex organization or Big 4 firm.
- Experience in the automotive or manufacturing sector is preferred.
- Strong knowledge of Enterprise Risk Management (ERM), risk assessment methodologies, and internal controls.
- Professional certifications such as CRMA, FRM, PRM, ISO 31000, CIA, CPA, ACCA, or CFE are preferred.
- Strong analytical, reporting, communication, and stakeholder management skills.
