Head of Risk and Compliance

Job Description

This position will report to the CEO and provide support and assistance in risk and compliance related matters to ensure that practices, systems, and documentation comply with internal policies and applicable laws, regulations, and codes of practices.

• Manage all risk and compliance related matters including compliance to PDPA, Charities Act, Companies Act, and other applicable laws and regulations.
• Close internal control gaps identified by internal/external auditors.
• Execute and review the enterprise risk management framework.
• Oversee the annual enterprise risk management (ERM) exercise including risk identification, assessment, prioritization, mitigation, monitoring, and reporting.
• Develop yearly work plan for risk review, compliance checks, and internal control assessments to be reviewed and approved by Management/Board/Audit Committee.
• Perform compliance checks and internal controls assessment duties.
• Design and develop internal controls, including policies and procedures and internal control templates.
• Conduct training for all staff, including Department heads, on ERM, new/revised internal controls and policies, as well as new requirements imposed by, or best practices.
• Work with Departments to implement risk mitigation measures.
• Participate in process improvement work for increased effectiveness and efficiency.
• Train and coach team members.
• Participate in management meetings.
• Organize and prepare reports for periodic Risk Management Committee meetings.
• Prepare periodic updates to the Board and Board committees.
• Any other duties as assigned by the Management/Board.

Requirements

• Bachelor's degree and above.
• Good problem solving, analysis, and communication skills.
• Relevant consultancy and industry experience would be an advantage.
• Experience/knowledge in risk management, internal controls, internal audit, fraud prevention/detection, and development of policies and procedures.
• Applicable professional qualifications, such as Certified Internal Auditor, Certification in Risk Management, are preferred.

We regret that only shortlisted candidates will be contacted.