Senior Analyst, Enterprise Risk Management

JOB PURPOSE

The jobholder is responsible to support on managing the enterprise risk management process to meet Borouge’s risk management framework, in line with the overall Owner’s directions and practices, local regulations, and international standards.

This role includes supporting the risk manager in setting guidelines for comprehensive risk management, creating and facilitating the prioritization of risks; executing risk management reviews and controls testing and collecting related evidence to validate effective management of risks and derive assurance on effective functioning of Borouge’s Risk Management Process; conducting trainings and workshops on various topics relevant to risk management.

KEY ACCOUNTABILITIES

General & Strategic

1. Develop standard instructional documents / procedures for the Department and ensure effective discharge of the Department’s functions.
2. Develop training material for conducting trainings and workshops across the organization on various topics relevant for risk assessment and assurance.
3. Support the manager in providing risk management inputs about future potential projects.
4. Answer queries from stakeholders about the risk management guidelines or specific risks and mitigation plans.
5. Report to the manager on risk management activities, critical issues, changes in risks, and the progress on mitigation activities.

Planning & Preparation

1. Contribute to the development of the annual Risk management review schedule.
2. Develop the objective, scope, and approach for assigned risk management reviews and get it reviewed/approved from the Risk manager.
3. Prepare the risk management and controls testing programs and checklists.
4. Gather and compile the requirements of professional standards in identifying risks and determining risk ratings.
5. Demonstrate self-drive and seek orientations on work areas requiring more clarity.
6. Prepare agendas/presentations and record minutes and decisions of meetings between the risk management manager and the department/function management.
7. Review timelines, actions, and ownership assignments and participate in other actions, as required, to support the process of developing mitigation plans in the respective region.

Risk Assurance Review

1. Identify risks resulting from design deficiencies in processes/controls and ensure that they are adequately reported.
2. Prepare detailed work-papers of risk assessment reviews to ensure that evidence has been well documented.
3. Create/update the risk register and track adherence to standards and processes in the respective region.
4. Collate risks from each department/function in the respective region.
5. Support the manager in guiding the process and providing inputs to the categorization and prioritization of risks based on severity and occurrence (risk assessment matrix, etc.).
6. Obtain analyses and formulate an objective and independent opinion on the risks, their likelihood, and the adequacy and effectiveness of mitigating controls.
7. Track activities and ownership assignments in mitigation plans and ensure adherence to guidelines in the respective region.
8. Review/assist implementation of management action plans & verify effective closure of the same.
9. Prepare and conduct trainings for Risk Champions on Risk Management Methodology.

Department Reviews & Reporting

1. Provide reports on a regular basis and as directed or requested by the Department Manager to update the information on progress of Risk management reviews.
2. Ensure that as per the department’s requirements, a periodic structured reporting of key risks, risk ratings, mitigation plans, and status of mitigation plans is done.
3. Prepare and/or assist in the preparation of formal written risk management reports.

QUALIFICATIONS, EXPERIENCE, KNOWLEDGE & SKILLS

1. Bachelor's Degree in Science or Engineering or any other relevant professional qualification with a Professional certificate in Risk Management.
2. Fluency in English Language; written and oral.

Minimum Experience & Knowledge & Skills

1. Minimum of 6 years of experience, including at least 3-4 years in risk management, including exposure to the Oil and Gas industry.
2. Strong project-management skills with experience in defining new guidelines and processes.
3. Familiarity in developing management documents; strategies, policies, frameworks, procedures, etc.
4. Well-established computer skills in office productivity software such as Microsoft Office.
5. Knowledge in the operational areas, policies, and procedures of the organization.
6. Oil & gas industry experience is desired.

Professional Certifications

1. Preferred to be certified auditor; ISO9000, Institute of Internal Auditors, COSO, etc.
2. Global Association of Risk Professionals (GARP) - financial Risk Manager examinations leading to financial risk manager (FRM) certification.
3. Institute of Risk Management (IRM) - the International Certificate in Financial Services Risk Management, and the International Certificate and Diploma in Enterprise Risk Management.