Lead - Operations & Enterprise Risk Management (ORM & ERM)

Role Overview

This position is responsible for conceptualizing, establishing, and overseeing the enterprise and operational risk management frameworks in line with organizational goals and risk appetite. The role ensures that risk policies, processes, and evaluations are robust, adaptive, and integrated across the company, facilitating informed decision-making and business continuity.

Key Challenges

• Rapidly evolving external market conditions necessitate frequent updates to the company’s risk management approaches.
• Rolling out risk management initiatives amidst ongoing business expansion and frequent introduction of new offerings.
• Ensuring end-to-end operational risk identification and mitigation, especially given dynamic internal changes and difficult data collection for risk evaluation.
• Promoting organization-wide risk management awareness, particularly across widespread geographic branches and various risk profiles.
• Overcoming dependencies on other functions for timely, accurate risk data to support risk model development.

Main Responsibilities

• Design and drive implementation of an all-encompassing operational risk management framework, including data-driven analysis and timely release of operational loss, key risk indicators, and process risk assessment reports.
• Lead the adoption of an enterprise risk management framework, facilitating risk identification, periodic action plan reviews for key risks, and generation of risk assessment heat maps and scorecards.
• Develop, update, and enforce risk management policies, guidelines, and best practices; coordinate quarterly policy certifications and compliance testing.
• Initiate and guide risk evaluation projects, including product, process, system, outsourcing, and new business initiative assessments, ensuring risk management is embedded into core business activities.
• Develop frameworks and governance for outsourced activities, secure board approvals, and monitor vendor performance from a risk perspective.
• Keep internal and board-level risk committees informed with comprehensive updates on key business risks, strategies, integrated risk responses, and performance metrics.
• Foster a risk-aware culture through web-based and in-person training initiatives, highlighting incidents and enforcing appropriate remedial actions.
• Lead, motivate, and upskill risk management team members, promoting transparency and structured career development to drive long-term effectiveness.

Additional Information

Given the scale of expansion and introduction of new products, maintaining robust risk management across all levels and locations is a key expectation.