Enterprise Risk Management and Business Continuity Management Manager

Location: Head Office

Job Purpose:

The manager works closely with cross-functional teams, senior leadership, and external partners to strengthen organizational resilience.

1. Risk Governance and Framework

• Develop, implement, and maintain the company’s ERM frame in accordance with corporate governance standards.
• Embed risk management principles within the organization’s policies, decision-making, and performance management processes.
• Facilitate enterprise-wide risk identification, assessment, and prioritization.

1. Risk Identification and Assessment

• Lead company-wide risk identification workshops with functional heads to capture strategic, operational, financial, and compliance risks.
• Maintain and update the Corporate Risk Register, ensuring clear ownership, impact analysis, and treatment plans.
• Perform regular risk assessments to anticipate emerging threats and opportunities that may impact business objectives.

1. Risk Monitoring and Reporting

• Develop and maintain risk dashboards and key risk indicators (KRIs) for management and Board reporting.
• Coordinate quarterly risk reviews and prepare comprehensive risk management reports for the CFO, Executive Committee, and Audit & Risk Committee (ARC).
• Monitor the implementation and effectiveness of risk mitigation and action plans.

1. Business Continuity & Crisis Management

• Oversee the BCM Framework, ensuring readiness for disruptions (e.g., disasters, system failures, or supply chain issues).
• Coordinate scenario planning and simulation exercise to assess organizational preparedness.

1. Advisory and Partnership

• Serve as a strategic partner to business units by advising on risk exposure, controls and mitigation strategies for new projects, expansion or investment.
• Collaborate with Internal Audit and Compliance functions to ensure alignment in risk coverage and reporting.
• Provide risk management training and awareness programs across all levels of the organization.

• Bachelor’s degree Finance, Accounting, Industrial Engineering, or related field.
• Professional certifications required: CRM or ISO 31000 Certified Risk Manager.
• CPA is a highly preferred but not required.
• Minimum of 5 – 7 yrs of experience in risk management, internal audit, or corporate governance (preferably in retail or FMCG).
• Strong understanding of enterprise risk frameworks, internal controls, and financial management.
• Excellent analytical, facilitation and stakeholder engagement skills.
• Proficient in data visualization and risk reporting tools.
• Strong analytical skills and proficiency in Excel, Power BI/Tableau, and data analysis tools.