Assistant Manager, Risk Management

The National Kidney Foundation (NKF) is dedicated to promoting kidney health and providing quality, highly subsidised dialysis treatment and holistic care to patients. We strive to be an advocate and integrator for the community, by the community.

While supporting kidney failure patients with quality dialysis and integrated care, NKF's greater mission lies in preventing or delaying kidney failure through health education, deeper community integration, and strategic partnerships.

As we work toward our Future Forward 2030 vision, we remain committed to:

• Tackling the growing prevalence of kidney failure

• Enhancing patient support and care

• Leveraging technology to improve the efficacy and quality of treatment

The Risk & Compliance Officer plays a key role in supporting the Foundation's governance and assurance objectives by contributing to the effective implementation of risk management and compliance frameworks. We are seeking a detail-oriented and analytical individual with a background in IT audit, systems administration, or related disciplines, who is keen to apply their technical expertise in a risk and governance context. In this role, you will support compliance and risk reviews, maintain the enterprise risk register, provide technical insights to strengthen controls, and manage secretariat duties for risk and compliance committees. Your responsibilities are as follows:

1. Risk & Compliance Reviews

• Assist in the development and execution of the annual risk and compliance review plan.

• Conduct risk assessments, control testing, and compliance checks for key operational and IT processes.

• Monitor regulatory and policy compliance, escalating breaches and recommending corrective actions.

• Liaise and coordinate compliance review activities with Risk Champions from each department or function.

• Support risk awareness and training initiatives across the organization.

2. Enterprise Risk Register Maintenance

• Maintain and update the Enterprise Risk Register, ensuring risks are accurately assessed and tracked.

• Work with business units to identify, assess, mitigate, and track operational and IT-related risks.

• Generate periodic risk dashboards and analytics for Management and Board reporting.

• Support scenario analysis, control self-assessments, and key risk indicator (KRI) tracking.

3. IT Risk and Control Advisory

• Apply IT audit or IT systems knowledge to assess technical and cyber-related risks.

• Support IT departments in developing controls and compliance mechanisms for systems and data protection.

• Liaise with internal audit, IT security, and external regulators on IT risk and compliance matters.

4. Secretariat & Governance Support

• Serve as secretariat for the Audit Risk Committee and other governance forums.

• Coordinate meeting schedules, prepare agenda papers, compile minutes, and follow up on action items.

• Maintain accurate records of committee decisions and ensure timely submission of reports.

• Support documentation and communication of policies, procedures, and risk updates to business units.

What we are looking for:

• Preferable 5-7 years of relevant experience in IT auditing, IT administration, or risk/compliance functions.

• Professional certification preferred: CISA, CRISC, CISM, or equivalent.

• Experience in maintaining governance documentation and risk registers.

• Understanding of enterprise risk management frameworks (e.g., ISO 31000, or similar).

• Proven experience in organizational and coordination tasks, preferably handling secretariat duties.

• Strong analytical and problem-solving skills, with meticulous attention to detail.

• Proficiency in risk management tools and Microsoft applications, including Excel, SharePoint, Power BI, and Word.

• Excellent written and verbal communication skills, with the ability to summarize complex issues clearly and concisely.

• High level of integrity and professional judgment, particularly in handling confidential information.

• Self-motivated, proactive, and able to take ownership of responsibilities independently.

• Collaborative team player with the ability to work effectively across both business and technical stakeholders.