Assistant Manager/Manager, Group Risk and Internal Control

Drive and enhance the Group Enterprise Risk Management (ERM), Internal Controls, and Business Continuity practices, including risk reporting, analytics, and insurance management across the Group.

Key responsibilities:

Enterprise Risk, Internal Controls & Business Continuity

Drive the implementation and continuous enhancement of the Group's Enterprise Risk Management (ERM) and Internal Control frameworks across Business Units (BUs)
Develop, review and implement ERM policies and control guidelines, and deliver targeted training to management and process owners
Facilitate risk and internal control discussions to identify gaps, and promote the adoption of good practices and mitigating controls across the Group to strengthen organisational resilience
Prepare and consolidate Group risk reports, including risk dashboards, Key Risk Indicators (KRIs), and insightful analysis for Management and Board reporting
Support the review and tracking of compliance with Minimum Acceptable Controls (Controls Self-Assessment) across BUs
Coordinate and review the insurance renewal process, including data consolidation, exposure analysis, and coverage review to ensure adequacy and cost-effectiveness
Conduct periodic reviews and optimisation of the Group insurance programme in collaboration with the appointed broker and internal stakeholders (e.g. Cyber, Industrial All Risks, Directors & Officers Liability)
Analyse claims trends and provide insights to support risk mitigation and loss prevention initiatives
Participate in internal control activities, including attending opening and closing meetings with Internal Auditors, where required
Support the implementation and maintain continuous improvement of the Group Business Continuity Management (BCM) and Crisis Management framework, policies and processes, including coordination of BCP / CM reviews, exercises, and tracking of remediation actions
Drive the digitalisation and continuous enhancement of data collection, analytics, including the development, optimisation, and administration of related tools, systems, and questionnaires

Qualifications & Work Experience

Bachelor's Degree in Business Management, Risk Management or similar
Experience in COSO ERM and ISO31000 risk management frameworks
Minimum 5 years of experience in Enterprise Risk Management (ERM). Candidates with closely related experience, such as Internal Controls or Risk & Compliance, may also be considered.
Exposure to data protection regulations (e.g. PDPA, GDPR), Business Continuity Management, or other related risk areas will be advantageous
Ability to work independently with minimal supervision in a dynamic environment
Meticulous with strong attention to detail, with the ability to identify gaps and control weaknesses in business processes
Strong interpersonal and communication skills, with a collaborative mindset
Strong storytelling and presentation skills, with the ability to communicate complex ideas clearly; proficient in Management & Board report writing and data analysis
Strong organisational and prioritisation skills, with the ability to manage multiple tasks and meet deadlines

Assistant Manager, Group Risk and Internal Control