Job Summary

We are seeking an experienced and proactive Senior Risk and Internal Control Executive to strengthen and enhance our Enterprise Risk Management (ERM), Functional Risk Management (FRM), Business Continuity Management (BCM), and Internal Control frameworks. This role will work closely with cross-functional teams, management, and governance committees to identify, assess, and mitigate strategic and operational risks, improve internal controls, and promote a risk-aware and control-conscious culture across the organization.

Key Responsibilities

1. Enterprise & Functional Risk Management (ERM / FRM)

• Assist the implementation and continuous improvement of ERM and FRM frameworks across all business units.
• Support the facilitation of risk assessments, risk workshops, mitigation planning, and regular risk reviews with business units and risk owners to support enterprise and functional risk management activities.
• Update and maintain risk management policies, frameworks, risk registers, Risk Appetite, Key Risk Indicators (KRIs), and Risk and Control Self-Assessment (RCSA) tools and processes.
• Support the Risk Management team in coordinating RMC, AC, and related risk governance activities, including preparing risk reports, dashboards, presentation materials, and quarterly risk management updates for Management and Board-level committees.

2. Business Continuity Management (BCM)

• Coordinate company-wide Business Continuity Management (BCM) and operational resilience activities.
• Facilitate Business Impact Analysis (BIA), Business Continuity Plan (BCP) development, crisis management communication plan, and BCM drill exercises across key functions.
• Monitor BCM readiness and recommend improvements to strengthen organizational resilience.

3. Internal Control & Governance

• Implement and advise on Control Self-Assessment (CSA) activities and support the ongoing implementation of the Internal Control Framework, such as COSO.
• Partner with business units to provide advice and recommendations on control and process improvements, ensuring that business processes and controls are properly designed and implemented.

4. Risk Culture & Capability Development

• Deliver Risk Management and BCM training programs to strengthen capabilities across business units.
• Promote risk awareness, accountability, and proactive risk ownership throughout the organization.

Qualifications

• Bachelor's or Master's degree in Risk Management, Business Administration, Finance, Accounting, Economics, or a related field.
• Minimum 5-7 years of experience in Enterprise Risk Management (ERM), Operational Risk Management (ORM), Business Continuity Management (BCM), Internal Control, or related governance functions. preferably FMCG or Manufacturing industry.
• Experience in facilitating enterprise-wide risk assessments, risk workshops, risk register development, and risk reporting.
• Strong communication and people skills, Business partnering mindset, able to influence management and work with across functions.
• Strong knowledge of Enterprise Risk Management frameworks and methodologies, including COSO ERM, ISO 31000.
• Strong communication and people skills, Business partnering mindset, able to influence management and work with across functions ,problem-solving skills, and Good in English verbal and written communication.