Senior Manager, Enterprise Risk Management (ERM) at Cellulant

JOB DESCRIPTION:

• This role is responsible for overseeing the development, implementation, and ongoing management of a comprehensive risk framework across the organization, identifying potential risks, assessing their impact, and coordinating mitigation strategies to protect the company's strategic objectives and financial stability.

KEY RELATIONSHIPS AND STAKEHOLDERS:

• All business lines and support functions, Operational Risk, Information Security, Internal Audit & Controls, Compliance & Regulatory, Cellulant clients and partners, Regulators in all Cellulant markets, Third-party suppliers and Auditors

CORE RESPONSIBILITIES:

• Enterprise Risk Management (ERM): Establish a robust ERM framework, including risk analysis, reporting, and culture embedding. Develop and implement the organisation's risk appetite and tolerance levels, ensuring adherence in all operations. Set up a robust risk governance framework to ensure thorough oversight and control over Cellulant's risk exposure. Review and update risk policies, tolerances, and appetites in line with business needs and in alignment with oversight requirements of Board and Risk Committee
• Operational Risk Management: Support the documentation and assessment of risks and controls across the company, coordinating the monitoring and reporting of key risk indicators. Maintain risk events and issue logs, and drive improvement actions based on internal and external feedback. Lead risk mitigation strategies that leverage digital solutions and are scalable as the organisation expands.
• Credit Risk Management: Drive the development and implementation of credit risk policies/ frameworks required for the monitoring and management of credit exposure, assessment of creditworthiness for partnerships and customer transactions
• Market Risk Management: Guide the organisation in understanding and mitigating market, liquidity, and country risks. Ensure compliance with risk appetite and proactively address risks in new product introductions.
• Technology Risk Management and Data Protection - Identify, assess, mitigate, and monitor IT-related risks, such as cybersecurity threats, system failures, data breaches, and compliance violations. In addition, prevent or reduce the adverse effects of these risks on the operations, financial performance, and business reputation. Support initiatives to protect against data breaches and cybersecurity risks, collaborating closely with Information Security and IT to implement safeguards
• Third-Party/Vendor Risk & Data Privacy: Implement a third-party risk management program(TPRM), ensuring vendors and service providers meet risk and security standards.Collaborate with Legal and Compliance teams to ensure third-party contracts include robust risk, data security, and compliance clauses
• Business Continuity: Lead business continuity and disaster recovery planning, ensuring Cellulant can operate effectively during disruptions, ensuring the resilience of Cellulant's platforms and business processes. Develop and implement crisis management frameworks for potential security breaches, fraud incidents, and major operational failures.
• Strategic, Reputational Risk, AMP (Assessment, Mitigation & Performance) and Ethics: Set and enforce standards and procedures that manage stakeholder expectations and company reputation, ensuring performance alignment with these standards
• Risk Culture and Awareness - Drive initiatives that instill a risk-aware culture, fostering accountability and ownership of risk management across all levels of the organisation. Conduct regular training sessions and awareness programs, ensuring all teams understand and proactively manage risks associated with their functions.
• Reporting - Develop comprehensive reporting, provide Vice President, Risk, CEO Board Risk & Audit Committee and the Board with regular, actionable reports on risk exposures, mitigation efforts, and emerging trends. Oversee the creation of real-time risk dashboards to enhance visibility and monitoring of critical KRIs and risk trends.

MUST HAVE EXPERIENCE:

• At least 10 years relevant experience within Risk and Assurance roles ideally within reputable financial services or the payments industry. Experience should include:
• Familiarity with risk management international best practice and frameworks (COSO, COBIT, NIST, ISO, etc)
• Familiarity with the African fintech landscape, including credit, market, and operational, etc risk specific to emerging markets.

EXPERIENCE THAT WILL COUNT IN YOUR FAVOUR:

• Experience that will count in your favor:
• Internal Controls, Audit, Data Protection, ISO Certification, Business Continuity, Operational Risk, Technology Risk
• People and Knowledge Management
• Credibility

QUALIFICATIONS:

• A bachelor's degree in finance, business administration, technology, law or any other relevant field. Certifications in risk management

SKILLS:

• Presentation/reporting skills, Interpersonal skills and Analytical skills; communication of complex risk management information to internal teams, management teams, Boards and other relevant stakeholders; collaborative approach to fostering risk culture.

PERSONAL ATTRIBUTES:

• Openness
• Strategic thinker
• Ability to balance growth and risk