Engineer – Operational Risk Management
JOB SUMMARY
The purpose of this position is to coordinate with the technical and operational departments in preparing and updating the departmental risk registers. The incumbent is also responsible to prepare periodic progress reports derived from the departmental risk registers for submission to the management.
JOB RESPONSIBILITIES
- Provide inputs in the plan to maintain the enterprise risk management system up-to-date.
- ERM Framework for providing guidance, facilitation to first line of defense, in identifying, assessing, evaluating, categorizing, prioritizing, monitoring and controlling all significant risks facing the Entity by reviewing and approving risk management methodologies
- Provides guidance in identifying and assessing risk and determining the adequacy and cost effectiveness of controls
- Processes, systems, procedures and data management capabilities to support the enterprise-wide risk management framework
- Coordinates with the department as per the plan in order to finalize the entries in the risk registers.
- Assist the technical / operational departments in carrying out a thorough risk assessment to obtain an understanding of risks. Include physical assets, any business processes and manpower to identify threats, vulnerabilities, probabilities of occurrence and potential impact assessment.
- Contact the departments to check the progress of actions necessary to mitigate the risks, as specified against each risk within the respective risk register.
- Assist in conducting training and awareness sessions relating to risk management for the employees of the user departments with a view to create a culture where risks are timely identified and removed with appropriate actions.
- Prepares monthly reporting for the management on the status of the identified risks and corresponding mitigation actions.
- Highlight risks which have to be accepted and for which there may not be any appropriate action. Assist the technical and operational departments in applying the relevant approach in taking steps to reduce risks, accept risks where the department has no viable option but to live with the risks, transfer risks where all or most of the systems/assets are insured and avoid risks where the department decides not to engage in a risky activity.
- Contribute in articles to create risk awareness for publication in the company’s magazines.
- The individual shall ensure compliance to the Enterprise Risk Management Framework enforced in the Company while performing job responsibilities in accordance with his assigned role.
- The individual shall ensure compliance to the Business Principles and Ethics Policy / Code of Conduct.
- Perform any other task assigned by superiors.
