We are hiring a Senior Manager to be part of the team which supports implementing the company’s enterprise risk management program. This includes identifying, assessing, and mitigating risks to the company, development of programmes to reduce risk and improve the orgnisation’s control and compliance posture.
Roles and Responsibilities
· Support the development and implementation of the company’s enterprise risk management framework including the annual top risk analysis, enterprise risk awareness training, etc.
· Drive and maintain the organisation’s Healthcare Control Library (HCL) programme for IT and Data- in coordination with key stakeholders across the various teams. Be the focal point for all HCL queries from internal & external stakeholders including internal audit.
· Work with senior management to prioritise the HCL development taking into consideration business needs and resource availability.
· Development and maintenance of control assurance framework with key stakeholders.
· Support the rollout and development of the Self-Identified Issues (SII) Programme including the review and reporting of SIIs.
Requirements
· University Degree or equivalent with major study in Computer Science/ Information technology.
· At least 7 to 10 years of working experience in the public sector or multinational corporation, with good knowledge of IT processes.
· Aptitude and experience in first, second or third lines of defense and familiar with enterprise risk management concepts including risk & control self-assessment and policy management.
· Candidates with CISA or CIA or CISM certifications would be advantageous.
· Ability to challenge the status quo with confidence and courage to raise/escalate issues in a pro-active, professional and timely manner.
· Excellent organizational skills to drive company-wide initiatives, manage multiple deadlines and effectively prioritize workloads.
· Self-motivated and with strong interpersonal skills to foster positive relationships with internal and external stakeholders.
· Good interpersonal and written communication skills, with the ability to influence stakeholders of all levels
