About the Role
The Enterprise Risk Management (ERM) Analyst will play a critical role in supporting the Head of ERM in identifying, assessing, and mitigating risks across the organization.
This position will be integral in ensuring that the company's risk management processes are aligned with Governance, Risk, and Compliance (GRC) frameworks.
The ERM Analyst will assist in the development, implementation, and continuous improvement of risk management strategies tprotect the organization's assets and enhance its ability tachieve its strategic objectives.
Responsibilities
Risk Identification and Assessment:
Assist in identifying and evaluating enterprise risks across various departments.
Conduct risk assessments and analyze potential impacts on business operations.
Support the development and maintenance of risk registers.
Risk Mitigation and Control:
Collaborate with business units tdesign and implement risk mitigation strategies.
Monitor the effectiveness of risk controls and recommend improvements.
Develop and maintain documentation for risk management policies and procedures.
GRC Alignment:
Ensure risk management practices are in alignment with GRC frameworks.
Assist in the integration of risk management activities with compliance and governance processes.
Support the implementation and maintenance of GRC tools and systems.
Reporting and Communication:
Prepare regular risk reports for the Head of ERM and senior management.
Communicate risk-related information effectively tstakeholders.
Assist in the preparation of materials for risk management committees and board meetings.
Continuous Improvement:
Stay updated on industry trends and best practices in risk management and GRC.
Recommend enhancements tthe ERM department timprove its effectiveness.
Participate in risk management training and awareness programs for staff.
Qualifications
Bachelor’s degree in Risk Management, Finance, Business Administration, or a related field.
Professional certifications such as Certified Risk Management Professional (CRMP), Certified Risk Manager (CRM), or equivalent are a plus.
Lead Implementer certifications in IS27001 (Information Security Management), IS22301 (Business Continuity Management), or IS9001 (Quality Management) are highly desirable.
Experience:
2-4 years of experience in risk management, internal audit, compliance, or a related field.
Experience with GRC frameworks and tools is preferred.
Skills:
Strong analytical and problem-solving skills.
Excellent communication and interpersonal skills.
Proficiency in risk management software and Microsoft Office Suite.
Ability twork independently and as part of a team.
Detail-oriented with strong organizational skills.