Position: Risk Management Specialist

Department:

Risk Management

Working Location: Park Venture Building, BTS Ploenchit

Purpose of the Job

The

Risk Management Specialist

is responsible for implementing and maintaining the organization's Enterprise Risk Management (ERM) framework by applying appropriate risk management methodologies, tools, and best practices across business operations. The role identifies, assesses, monitors, and reports enterprise-wide risks to support informed decision-making and ensure risks remain within the organization's acceptable risk appetite.

The position also supports Business Continuity Management (BCM), promotes risk awareness throughout the organization, and works closely with business units to strengthen risk governance while ensuring the achievement of the company's strategic objectives.

Key Responsibilities

Enterprise Risk Management (ERM)

Implement and maintain the Enterprise Risk Management (ERM) framework across the organization.

Identify, assess, analyze, and evaluate enterprise risks, including:

Strategic Risks

Operational Risks

Financial Risks

Legal and Compliance Risks

Emerging Risks

Sustainability (ESG) Risks

Ensure risk management practices align with international frameworks and standards, including

COSO ERM

and

ISO 31000

Develop, review, and maintain risk management policies, procedures, manuals, and related documentation.

Facilitate risk assessment workshops and meetings with Risk Owners and business units.

Prepare risk assessment reports, including risk causes, impacts, mitigation plans, and recommendations for presentation to the Risk Management Committee (RMC) and senior management.

Monitor the implementation of risk mitigation plans and follow up on corrective actions.

Key Risk Indicator (KRI) Management

Develop and maintain Key Risk Indicators (KRIs) to monitor enterprise risks.

Work closely with business units to establish appropriate leading and lagging risk indicators.

Collect, consolidate, and analyze KRI data across the organization.

Monitor risk trends and identify potential risk exposures.

Prepare monthly and quarterly KRI reports for senior management and the Risk Management Committee.

Recommend proactive actions based on risk trends and KRI analysis.

Coordinate with Risk Owners to ensure timely implementation of mitigation actions.

Business Continuity Management (BCM)

Develop, review, and maintain the Business Continuity Management (BCM) framework.

Prepare and update Business Continuity Management policies, procedures, and manuals.

Coordinate Business Continuity Plan (BCP) development with all business functions.

Organize BCP workshops, meetings, tabletop exercises, and simulation tests (both on-site and online).

Coordinate BCP testing across manufacturing plants and business functions covering all company products.

Monitor crisis situations and coordinate with relevant departments during emergencies.

Prepare reports and recommendations for the Emergency Management Team and Risk Management Committee.

Support continuous improvement of BCM processes and recovery capabilities.

Risk Awareness, Training & Risk Culture

Promote a strong risk management culture throughout the organization.

Monitor emerging risks and incorporate them into training programs.

Develop and deliver Enterprise Risk Management (ERM) and Business Continuity Management (BCM) training programs.

Evaluate training effectiveness and continuously improve training materials.

Provide consultation and guidance to business units regarding risk management practices.

Support enterprise-wide awareness campaigns related to risk management and business continuity.

Cross-functional Coordination

Collaborate with Risk Owners across all business units to identify and manage enterprise risks.

Coordinate quarterly and annual risk assessment meetings.

Conduct interviews and follow-up meetings with Risk Owners regarding risk mitigation progress.

Coordinate BCM and BCP projects across all business functions.

Support special projects and other assignments as assigned by management.

Key Performance Indicators (KPIs)

Completion of Enterprise Risk Assessments according to schedule.

Timely submission of monthly and quarterly Enterprise Risk Management reports.

Timely reporting of Key Risk Indicators (KRIs).

Completion rate of risk mitigation action plans.

Number of Business Continuity Plans (BCPs) reviewed and updated.

Completion of BCM simulation exercises across business units.

Improvement of enterprise risk awareness through training programs.

Compliance with COSO ERM, ISO 31000, and internal governance requirements.

Effectiveness of risk monitoring and reporting processes.

Education

Bachelor's degree or higher in Accounting, Finance, Business Administration

Statistics, Economics, Risk Management, Industrial Engineering or a related field

Qualifications

Minimum

3 years of experience

in Enterprise Risk Management (ERM), Internal Control, Internal Audit, Corporate Governance, Compliance, or related fields.

Experience in manufacturing, industrial, or publicly listed companies is preferred.

Strong knowledge of

Enterprise Risk Management (ERM) frameworks

, including

COSO ERM

and

ISO 31000

Knowledge of Corporate Governance (CG) principles.

Experience in Business Continuity Management (BCM) and Business Continuity Planning (BCP).

Strong analytical thinking, risk assessment, and problem-solving skills.

Good understanding of business operations and organizational processes.

Experience in facilitating risk workshops and coordinating cross-functional teams.

Excellent report writing and presentation skills.

Strong communication, interpersonal, and stakeholder management skills.

Ability to provide professional consultation and recommendations to business units.

Proficiency in Microsoft Office (Excel, PowerPoint, Word) and data analysis tools.

Good command of English, both written and spoken.