SENIOR EXECUTIVE

Company Overview

Role Purpose

Academic Stream

Work experience (in months)

Job Responsibility and key Decisions

Risk Identification and Assessment

Support enterprisewide and businessunitspecific risk assessments.

Facilitate interviews and workshops with key stakeholders to identify emerging and existing risks.

Maintain and update risk registers in alignment with internal governance structures.

Risk Monitoring and Reporting

Track risk mitigation plans, action owners, and deadlines.

Develop periodic risk reports and dashboards for senior management and risk committees.

Monitor key risk indicators KRIs and escalate deviations from thresholds.

Control Evaluation and Enhancement

Evaluate the design and effectiveness of controls in highrisk areas e.g., data integrity, thirdparty risk, cybersecurity.

Propose enhancements to internal controls and operational processes to reduce exposure.

Support for Internal Audits

Collaborate with Internal Audit to align on riskbased audit planning.

Assist in preaudit risk assessments and postaudit action tracking.

Ensure audit findings are incorporated into the broader risk framework.

Regulatory and Strategic Risk Support

Monitor the external regulatory environment for changes impacting business or compliance risk.

Support risk assessments for strategic initiatives e.g., new product launches, MA, market entry.

Incident Tracking and Lessons Learned

Support tracking of incidents, CAPAs, and other risk events.

Work with stakeholders to ensure risk learnings are incorporated into policies, training, or risk controls.

Training and Awareness

Contribute to risk awareness training and education efforts.

Help embed risk thinking into daily business decisionmaking across departments.

Key Decisions Made by the Role

Prioritizing and categorizing risks based on severity, likelihood, and business impact.

Recommending actions or escalations for risks exceeding tolerance thresholds.

Advising on risk mitigation strategies in collaboration with business risk owners.

Determining whether control gaps require immediate remediation or longerterm planning.

Recommending improvements to the ERM framework, policies, or reporting structures.