Risk Management Lead

JOB PURPOSE:

Strengthen enterprise risk posture by identifying, assessing, and mitigating strategic, operational, financial, and regulatory risks, ensuring risk-informed decision-making and business continuity.

• Conduct enterprise risk assessments and maintain risk registers
• Develop risk mitigation plans and monitor implementation
• Perform risk analysis for new initiatives and projects
• Support business continuity and incident response planning
• Prepare risk reports for leadership and governance committees
• Promote risk awareness culture across departments
• Develop, maintain, and continuously enhance the Enterprise Risk Management (ERM) framework, methodologies, tools, and templates across the organization
• Prepare and maintain executive risk reports and dashboards for the CEO and the Audit Committee to support informed decision-making and governance oversight
• Develop, monitor, and periodically review the organization's Risk Appetite, Risk Tolerance, and Key Risk Indicators (KRIs)
• Lead Business Continuity Management activities, including Business Impact Analysis (BIA), Business Continuity Planning (BCP), and participation in crisis management and incident response activities
• Drive the implementation and continuous improvement of Enterprise Risk Management practices across the organization

• Bachelor's degree in Management, Finance, or related field

• 5-7 years in risk management or internal control.
• Experience implementing or enhancing ERM frameworks
• Proven experience conducting enterprise-wide risk assessments
• Exposure to risk appetite framework development
• Experience preparing risk reports for senior leadership
• Proven experience in establishing, designing, or enhancing Enterprise Risk Management (ERM) programs
• Experience with in technology companies, digital platforms, or fast-growing organizations is preferred
• Professional certification in ISO 31000 Risk Management or an equivalent risk management certification is preferred
• Practical knowledge of internationally recognized risk management and governance frameworks, including ISO 31000 and COSO Enterprise Risk Management (COSO ERM
• Familiarity with regulatory and compliance risk environments