Senior Risk Manager - Enterprise Risk Management

About the role

A group is seeking an experienced Senior Risk Manager to lead and embed Enterprise Risk Management (ERM) across a diversified portfolio including construction and EPC, investments and assets, hospitality and technology. The role owns the design, implementation and continuous improvement of the ERM framework, ensuring risks are identified, assessed, owned and reported, and that they inform strategic, investment and project decisions. Deep ERM experience in construction, EPC, infrastructure or large-scale contracting is required.

Key responsibilities

• Develop, implement and maintain the Group ERM framework, policy and methodology in line with ISO 31000 and COSO ERM (2017)
• Define and refresh the risk appetite statement, tolerance levels and risk rating criteria, and cascade them to business groups and major projects
• Establish risk governance structures, including risk ownership, a network of risk champions and escalation protocols
• Facilitate top-down strategic risk assessments with executives and bottom-up operational assessments with business groups
• Maintain risk registers at Group, business-group and project level, with owners, controls and time-bound mitigations
• Design and monitor Key Risk Indicators (KRIs) and lead horizon scanning for emerging risks
• Embed risk management in the capital project lifecycle and lead quantitative schedule and cost risk analysis (e.g. Monte Carlo simulation)
• Provide independent risk opinions on investments, acquisitions, joint ventures and major tenders, and assess procurement, subcontractor, claims, variation and cash-flow risks
• Prepare consolidated risk reports and dashboards for executive management, the Audit Committee and the Board
• Integrate risk into strategic planning, budgeting and performance management, and coordinate with Internal Audit, Compliance and other assurance providers
• Build risk awareness through training and workshops, and lead and mentor risk management team members

Required profile

• Bachelor's degree in Engineering, Finance, Accounting, Quantity Surveying, Risk Management or a related field; a Master's is an advantage
• 12-15 years of total professional experience, with at least 8 years in ERM or risk management roles
• Proven experience designing and implementing ERM frameworks in a group or multi-entity environment
• Strong experience in construction, EPC, infrastructure or large-scale contracting
• Essential exposure to investment appraisal and capital projects; oil and gas experience is a strong advantage
• Preferred certifications: IRM, PMI-RMP, RIMS-CRMP, ISO 31000 Lead Risk Manager, CRMA, FRM, CIA, ACCA, CPA or CMA
• Big 4 risk advisory experience and familiarity with GRC platforms (SAP GRC, Archer, MetricStream) and ERP systems (SAP, Oracle) are advantageous

Required skills

• Project risk management and quantitative risk analysis tools such as Primavera Risk Analysis, Safran Risk or @RISK
• Familiarity with GRC platforms and ERP systems (advantageous)