Risk Management Officer (Mid-Level) at Alfred & Victoria Associates

Job Summary

• The Risk Management Officer will support the implementation and continuous improvement of the Enterprise Risk Management (ERM) framework within company.
• The role is responsible for identifying, assessing, monitoring, and reporting operational, financial, regulatory, cybersecurity, strategic, and reputational risks across the organization.
• The successful candidate will work closely with business units to ensure risk management practices are embedded into operational processes, internal controls, compliance activities, and strategic initiatives while supporting the organization’s overall risk appetite and governance framework.

Key Duties & Responsibilities
Enterprise Risk Management (ERM):

• Support the implementation and monitoring of AET’s Enterprise Risk Management framework, policies, procedures, and tools.
• Conduct periodic risk assessments across departments and business functions.
• Assist in maintaining the enterprise risk register and ensure timely updates of identified risks and mitigation plans.
• Monitor emerging and existing risks that may impact business operations and strategic objectives.
• Support risk reporting activities for management, executive leadership, and board committees.
• Ensure risk treatment actions are tracked and escalated where necessary.

Operational & Business Risk Management:

• Identify operational risks arising from processes, systems, people, and external events.
• Work with business units to implement effective internal controls and risk mitigation measures.
• Monitor incidents, losses, control failures, and operational disruptions.
• Support process reviews to improve operational efficiency and reduce exposure to risk.
• Participate in business continuity and disaster recovery planning activities.

Regulatory & Compliance Risk:

• Monitor compliance with applicable regulatory requirements, internal policies, and industry standards.
• Assist in ensuring adherence to data protection and privacy regulations such as GDPR, NDPR, and other relevant standards.
• Support compliance reviews, audits, and remediation activities.
• Escalate identified compliance gaps and recommend corrective actions.

Cybersecurity & Technology Risk:

• Collaborate with the Information Security and Technology teams to identify and manage cybersecurity-related risks.
• Support the monitoring of risks relating to data security, system vulnerabilities, digital transformation initiatives, and emerging technologies.
• Assist in tracking remediation activities arising from security assessments and audits.

Risk Reporting & Analysis:

• Prepare risk dashboards, reports, and presentations for management review.
• Analyze risk trends, incidents, and control effectiveness.
• Maintain accurate documentation of risk assessments, controls, and mitigation actions.
• Support key risk indicator (KRI) monitoring and reporting activities.

Risk Awareness & Training:

• Promote risk awareness and accountability across the organization.
• Support the delivery of risk management training and sensitization programs for staff.
• Assist departments in embedding risk management practices into daily operations.

Key Performance Indicators (KPIs)

• Timeliness and quality of risk assessments conducted.
• Percentage of identified risks with implemented mitigation plans.
• Compliance adherence rate across departments.
• Timely closure of audit and risk action items.
• Accuracy and timeliness of risk reports and dashboards.
• Reduction in operational incidents and control failures.
• Staff risk awareness and training completion rates.

Qualifications & Experience
Education:

• Bachelor’s Degree in Risk Management, Business Administration, Finance, Accounting, Technology, Economics, or a related discipline.
• Relevant professional certifications such as CRISC, CRM, FRM, PRM, ISO 31000, CISA, or related certifications will be an added advantage.

Experience:

• 4 – 7 years’ experience in risk management, internal control, compliance, audit, cybersecurity risk, or related functions.
• Experience within a technology company, financial services institution, consulting firm, or regulated industry is preferred.
• Knowledge of enterprise risk management frameworks and governance practices.
• Experience in operational risk assessment and control monitoring.

Required Skills & Competencies:

• Strong analytical and problem-solving skills.
• Good understanding of enterprise risk management principles and internal controls.
• Knowledge of regulatory compliance requirements and technology-related risks.
• Strong report writing and presentation skills.
• Ability to analyze data and prepare meaningful risk insights.
• Effective communication and stakeholder management skills.
• High attention to detail and organizational ability.
• Ability to work collaboratively across departments.
• Proficiency in Microsoft Office Suite and risk reporting tools.

Behavioural Competencies:

• Integrity and professionalism.
• Proactive mindset.
• Critical thinking and sound judgment.
• Accountability and ownership.
• Team collaboration.
• Adaptability and continuous learning.

Working Relationships
Internal:

• Chief Risk Officer
• Managing Director/Executive Leadership
• Finance Team
• Information Security Team
• Internal Audit
• Operations & Business Units
• Human Resources

External:

• Regulators
• Auditors
• Consultants
• Vendors and Partners.