Our client is a prominent and growing healthcare group with an extensive business presence in Singapore. There is now a need for the organization to hire a driven, experienced, and dynamic individual to join them as a Senior Manager, ERM and Data Protection, and to be part of their team.
Responsibilities:
- Designing and implementing an overall risk management process for the organization
- Serve as Data Protection Officer (DPO) for the organization and put in data governance framework in the organization
- Regularly reviewing internal risk policy and ensuring compliance with new legislation
- Building risk awareness amongst staff by providing support and training on risk management principles and raising awareness of risk within the organization
- Work closely with relevant stakeholders to ensure effective development and implementation of Risk policies, PDPA Governance, procedures, and compliance to legislation.
- Designing monitoring systems to maintain the level of risk below the established threshold
- Risk reporting tailored to the relevant stakeholders within the business.
- Educating the board of directors about the most significant risks to the business; ensuring business heads understand the risks that might affect their departments; ensuring individuals understand their accountability for individual risks
- Manage the regular review and improvements to business continuity plans to limit risks
- Implementing health and safety measures, and ensuring adequate insurance coverage
- Conducting policy and compliance audits, which will include liaising with the internal and external auditor
- Reviewing any new major contracts or internal business proposals, to mitigate risk for the organization.
Requirements:
- Bachelor’s degree in business, finance, law, information technology, or a related field.
- Minimum 10 years of experience in risk management, data protection, or a related field, with at least 3-5 years in a managerial role and familiar with the implementation of operational and business risk management-related policies and procedures.
- Strong knowledge of risk management frameworks and data protection regulations
- Understanding risk control framework and operational risk management, drafting policies and procedures
- Handling & monitoring PDPA activity which includes training & business engagement
- Handling Workplace Safety issues on behalf of the organization
- Effective collaboration across functional teams and Interaction with stakeholders of varying seniority
- Manage a small team, coach, and provide direction to the team and the organization to achieve organization's objectives and as well as the individual's career development
- Preference is given to those with Regulatory Compliance or Compliance experience
