Job Description
Role Purpose
To be responsible for leading all efforts and activities aimed at ensuring risks are identified, quantified, monitored and mitigated effectively. Manage and report on SANS risk management activities in accordance with the established frameworks, in order to help mitigate the risk exposures, within the set KPIs, agreed budgets and adopted policies and procedures.
Responsibilities
Key Accountability Areas
Key Activities
Planning and Strategy
- Lead department's strategic and business planning process and provide inputs into SANS overall strategy development
- Ensure the development and monitoring of department business plan, strategic objectives and KPIs
- Drive the design of department's overall development strategy in collaboration with SANS Leadership
- Assist in GRC directorate's strategic and business planning process.
- Assist and monitor development of risk management business plan, strategic objectives and KPIs, in accordance with SANS overall strategies and directions.
- Provide assistance with managing the annual budgeting cycle and process.
Budget
- Participate in department annual budgeting cycle and process
- Contribute to utilizing department budget effectively, and report accurately on progress made and challenges encountered
- Investigate and propose implementing strategies that result in positive financial impact for SANS and mitigate financial and operational risks
Compliance & Governance
- Develop, update and implement the enterprise risk management framework, appetite, policies and procedures in line with professional standards and good practices, and ensure its implementation
- Prepare annual risk management plan in coordination with SANS management, and ensure its implementation
- Identify and research on potential threats to SANS reputation, financial sustainability, operational efficiency, technology capabilities, workforce investments and safety
- Utilize appropriate techniques for risk quantification, measurement, and aggregation to produce high quality risk matrices
- Identify risk mitigation gaps, agree the corrective action plans with management
- Ensure SANS risk register is centrally maintained in the GRC directorate, and updated on a regular basis
- Update the risk register after performing the risk assessment across SANS
- Facilitate preparation and day-to-day execution of annual risk management plan.
- Assist with conducting research to identify any new and emerging risks that could impact SANS.
- Gather information pertaining to different areas, departments, and processes, and facilitate with identification, assessment, documentation, and mitigation of the risks.
- Provide supervision and guidance to the staff in performing their roles and responsibilities, and delegated tasks for risk management activities
- Ensure the provision of regular risk awareness and training sessions to employees to enhance the ability of employees to conduct risk management activities
- Prepare risk reports with sufficient level of risk information and analysis to support management and the Board with decision making
Policies, Processes and Procedures
- Propose improvements to the department's policies, and ensure the implementation of procedures and controls across all areas of activity so that all relevant procedural/legislative requirements are fulfilled while delivering high quality and cost-effective results
- Monitor day-to-day activities to ensure compliance with stipulated policies and procedures
- Stimulate subordinates and contribute to the identification of opportunities for continuous improvement of systems and processes taking into account leading practices, changes in business environment, cost reduction and productivity improvement
People Management
- Manage, guide and assist direct reports to perform their functional operations in accordance with set policies and procedures
- Participate in identifying and recruiting key talent for the department
- Promote a high-performance working environment embracing SANS's values
Qualifications
Knowledge and Experience
- Minimum of 9 years of experience in Enterprise Risk Management or equivalent is required.
- Relevant experience in similar industry is preferred.
Education and Certifications
- A bachelor's degree in Finance, Accounting / Quantitative background (Mathematics, Statistics, Engineering, Computer Science etc.) or equivalent is required.
- Professional certification in Risk Management, and / or Internal Audit is preferred.
