Enterprise Risk Manager

SUMMARY:

POSITION INFO:
The Enterprise Risk Manager is responsible for developing, embedding, and maintaining the organisation’s enterprise risk management framework, with a primary focus on operational and information technology risk. Reporting to the Chief Operating Officer, the role plays a key part in supporting executive decision-making, governance, and long-term business resilience.

The position offers significant exposure to senior leadership and governance committees and has clear potential to develop into a broader senior management role. The environment is collaborative, fast-moving, and best suited to individuals who are willing to take ownership and work across traditional role boundaries.

Key Responsibilities

• Assess, monitor, and report on the organisation’s enterprise risk profile and key risk metrics to executive management and the board.
• Develop and maintain risk identification, mitigation, and monitoring frameworks, policies, and procedures.
• Support the implementation of risk frameworks across the business in collaboration with senior management.
• Conduct ongoing research into enterprise risk best practices, with particular emphasis on operational and IT risk within regulatory frameworks.
• Serve as an active member of the Finance, Risk, and Compliance Committee.
• Perform business process analysis across investment and support functions.
• Facilitate operational efficiency, control improvements, and scalability through redesigned processes and controls.
• Support management with continuous improvement initiatives and adoption of appropriate emerging technologies.
• Conduct operational service provider risk assessments and due diligence.
• Maintain and test business continuity and disaster recovery plans.
• Own the IT Risk Management Framework and contribute to the development of IT strategy.
• Serve as a member of the IT Steering Committee.
• Develop and oversee IT strategic and operational plans aligned to business requirements.
• Manage and monitor outsourced IT service providers to ensure effective service delivery and risk management.
• Oversee IT risk areas including cybersecurity, system resilience, data integrity, and third-party dependencies.
• Lead or support projects related to operational and technology enhancement initiatives.
• Apply structured project management methodologies to ensure effective delivery, governance, and risk oversight.

Experience and Qualifications Required

• Relevant professional qualification (e.g. finance, engineering, risk management, or similar).
• Strong foundational knowledge of enterprise risk management and internal control frameworks.
• Experience within the financial services sector (preferred).
• Minimum 5–10 years’ experience in enterprise risk management, with strong operational risk exposure.
• Proven experience in IT risk management, including cybersecurity and emerging technology risks.
• Exposure to governance structures, committees, and reporting at executive or board level.

Core Competencies

• Enterprise Risk & Control Design
• Operational and IT Risk Management
• Strategic Thinking and Judgement
• Process Analysis and Improvement
• Project and Change Management
• Regulatory Awareness and Governance
• Stakeholder Engagement and Influence
• Analytical Rigor and Problem Solving

Personal Attributes

• Self-motivated, ownership-driven, and comfortable working in fluid role environments.
• Strong critical, conceptual, and innovative thinking ability.
• Willingness to engage in both high-level strategy and detailed technical work.
• Highly organised, disciplined, and able to manage multiple priorities.
• Clear, confident communicator with strong written and verbal presentation skills.
• Curious, adaptable, and committed to continuous professional development.

• Financial Managers
• Financial Accountants
• Financial Controllers
• Chartered Accountants
• Group Reporting & Consolidations Accountant
• Commercial Finance and FP&A positions