Head, Enterprise Risk Management

Head, Enterprise Risk Management

The Head of Enterprise Risk Management (ERM) is responsible for leading the strategic development, implementation, and continuous refinement of the ERM Policy, Framework, and associated governance instruments across the Group.

Scope & Authority

1. Strategic Oversight: Develop and oversee the ERM strategy and framework to identify, analyze, and manage enterprise-level risks.
2. Policy Development & Implementation: Formulate and roll out the risk management policies that align with global best practices and regulatory requirements.
3. Compliance Integration: Ensure that Anti Bribery Anti Corruption (ABAC) laws and compliance risks are fully integrated into the ERM framework.
4. Decision-Making: Authority to make strategic decisions regarding risk assessment tools, methodologies and reporting.
5. Stakeholder Engagement: Direct communication and influence with the senior management, RCMC, and the BRCC members.
6. Secretariat: Maintains the flow of information to the Board and its committees (Board Risk Compliance Committee (BRCC), Risk Compliance Management Committee(RCMC)) and ensures provides advice, services and support to RCMC and BRCC as and when required.
7. Integrated Annual Financial Reporting: Develop and oversee Group Risk & Compliance annual reporting in collaboration with Group Internal Audit and Group Communications.
8. Leadership: Lead the Enterprise risk team, including the Business Continuity Management and Operational Risk management. Provide expert guidance to senior management on risk related matters, assisting with the strategic decision making processes.

Key Accountabilities

• Operating & Governance model: Support the Group Chief Risk & Compliance Officer to implement Group ERM operating and governance model.
• ERM Function: Build and oversee the Group ERM function
• ERM strategy and framework: Develop the enterprise risk management strategy, framework and related policies and processes, ensuring they meet regulatory expectations and are tailored to the business, while also enhancing operational efficiencies.
• Risk governance: Implement risk governance structures and processes to support effective risk decision-making across the enterprise. Develop and advise risk appetite statements and exposure limits and the execution of overall enterprise risk strategies.
• Risk assessment: Implement the Risk & Control Assessment (RCA) programme as needed to identify, assess, mitigate, supervise, and report Axiata portfolio risks in close collaboration with all business functions at Axiata. Perform analysis of enterprise risk data to identify insights, trends and emerging risks.
• Risk reporting: Ensure clear reporting procedures in place and train all lines of defense on escalation procedures. Ensure all incidents are captured and reported on a timely, accurate and complete basis to the RCMC, BRCC, and/ or management, as well as work with respective functions on root cause analysis to prevent/reduce recurrence and/or impact of any similar incidents. Prepare/complete all relevant materials/ papers on a timely basis highlighting key risks, mitigating controls and action owner for RCMC, BRCC, BAC and/or Board.
• Risk monitoring: Ensure risks and business activities are monitored and assessed on a regular basis aligning with set risk appetites and overall risk exposure.
• Risk remediation: Prepare any mitigation or remediation plans for risks falling outside prescribed risk appetites.
• Continuous Improvement: Monitor the effectiveness of risk management systems including escalation and reporting processes. Conduct periodic reviews to ensure continuous relevance and appropriateness, as well as incorporating comments from the Board and Management on risk appetite, risk limits, and a review of the existing key risk indicators (KRI) and thresholds.
• Collaboration: Regularly engage the Senior Leadership Team (SLT) and respective Head of Department (HOD) to identify key risks in their respective areas. Subsequently, assist them in analyzing and assessing their risk in light of the Axiata-approved risk methodology. Thereafter to ensure that appropriate controls are in place and risks are handled within the approved risk appetite framework. Furthermore, foster a culture of collaboration, innovation, and continuous learning within the Risk & Compliance division, promoting professional development and knowledge-sharing initiatives.
• OpCo Engagement: Collaborate with the Operating Companies (OpCo) to ensure Group ERM Strategy, Policies and other group driven requirements are implemented in the OpCo
• Stakeholder management: Engage with and report to high-level stakeholders, including executive and board sub committees, to align risk management with business and regulatory expectations.
• OpCo BRCC: Support the Axiata nominee/Group Chief Risk & Compliance Officer in preparation for the OpCo BRCC meetings and other risk and compliance related matters
• Annual integrated reporting: Develop and oversee the Group Risk & Compliance process for the annual integrated reporting, including but not limited to obtaining sign-off on Statement of Risk Management and Internal Control, Risks linked to strategy, risk and compliance components in the Chairman statement.
• Group Insurance: Develop and oversee Group Insurance process
• Cultural transformation: Lead initiatives to embed a proactive risk-aware culture throughout Axiata. Embed Integrated Risk Management, equipping and enabling risk owners to make informed risk decisions.
• Training and Awareness: Coordinate risk management education and awareness such as to educate all employees on risk management process and principles on a continuous and regular basis. Provide ERM awareness training during induction and risk workshop for senior management and board members.
• BRCC Conference: Develop and oversee BRCC Chairperson Conference and BRCC Risk & Compliance conference or any other related initiatives that will enhance risk management maturity in Axiata.

Key Result Area

• Risk Management Maturity: Measurable improvements in risk management maturity and integration across the Group.
• Reporting Efficacy: Timely and effective reporting to Risk and Compliance Management Committee (RCMC), Board Risk and Compliance Committee (BRCC), Board Audit Committee (BAC), Board Strategy Committee (BSC), and other relevant governance forums.
• Strategic Alignment: Seamless alignment of risk management practices with Group strategic goals and operational realities.

Job Requirements

• Risk Management: Extensive knowledge of the global and local risk practices and broader macro environment. Strong technical risk management knowledge (i.e. at least 12-15 years experience) and expert in leading risk management framework & standards such as ISO 31000 and COSO;
• Knowledge of prevailing corporate governance requirements;
• Solid financial and commercial acumen and understanding;
• Excellent presentation skills and experience planning and facilitating workshops / risk exercises with senior level audiences;
• Robust diligence and ability to pay close attention to detail, including impeccable report-writing skills;
• Must have demonstrated ability to handle departmental budgets, resources, processes, projects and relationships;
• Must demonstrate ability to handle multiple and conflicting priorities, and work under strict deadlines;
• Should be an effective communicator with the ability to handle both internal and external communication;
• Should have effective people management and conflict resolution skills.
• Technology Utilization: Proficiency in leveraging technology to enhance the effectiveness of risk management practices. Proficient in Microsoft Excel, PowerPoint and Word. Proficiency visual analytics tools such as PowerBI is a plus

Job Qualifications

• A minimum of twelve (12) years experience in Risk Management, six (6) of which must have been at a managerial level. Added advantage for those with Group / Public Listed exposure;
• Candidate must possess at least a Bachelor’s Degree in Business, Finance/Accounting, Economics, Actuarial sciences, Risk Management or related fields;
• Professional qualifications in risk management or finance is an added advantage;
• Must be a member of a finance or risk related professional body.

Role at senior level is on 3-year contract and subject to extension/renewable

Note: Please read our Privacy Notice at (https://www.axiata.com/our-business/ensuring-data-privacy). By applying to the role and subsequent recruitment process, you acknowledged the content of Axiata Privacy Notice.