Enterprise Risk Management and Internal Audit Lead

Overview to the Role:

The ERM & IA Lead  will play a critical role in identifying, assessing, and monitoring organizational risks, including emerging risks, and enterprise-wide risk exposures, The role is responsible for supporting the Enterprise Risk Management (ERM) framework, conducting risk assessments, and ensuring risk mitigation processes are effectively implemented. The position will also contribute to enhance risk awareness across the organization and aligning risk management practices with corporate strategy and governance and support with the internal audit plan for the FY by planning and scoping audits, identifying findings, and evaluating the effectiveness of risk mitigation actions and process adherence.

 

Key Responsibilities

• Support and conduct frequent engagement sessions with the 3 tier stakeholders as per the strategy and plan in order to ensure a more robust ERM process in line with the business.
• Conduct external risk assessment with the use of AI and enhance the AI Agent in the process with the tech teams. Produce a external risk bulletin to be presented to the leadership team.
• Work along with the team on fraud testing’s, field works of selective internal audit assignments, and support the IA Function when required.
• Assist in the risk register automation and the maintenance of automated risk registers and dashboards, ensuring timely updates and accuracy.
• Support the alignment of ERM policies and procedures with ISO31000/COSO standards, contributing to the development of risk manuals and documentation.
• Monitor and report on key risk indicators (KRIs), across the top 10 risks and across the group.
• Facilitate and deliver ERM training sessions, in collaboration with the IFS Academy.
• Support the preparation of quarterly top ten risk reports to the audit committee.
• Deliver the risk-based audits as per the Internal Audit Plan for 2026.
  
   

Key Performance Indicators (KPIs)

1. ERM Automation Milestones:
   Complete risk register and dashboard automation by Q1 2026 and support technology teams in developing AI-driven ERM automation solutions as per 2026 project milestones.
    
2. External Risk Assessment:
   Train the AI agent for external risk assessment and ensure timely submission of monthly bulletins based on assessment findings.
    
3. Stakeholder Engagement:
   Execute the stakeholder engagement plan and achieve ERM rollouts, training sessions, and engagement meetings with risk owners and senior management as scheduled.
    
4. ERM Framework:
   Enhance ERM policy and documentation in line with ISO31000/COSO standards bi-annually, maintain updated risk registers and KRIs for top 10 risks, and support timely preparation of quarterly audit committee presentations.
    
5. Audit & Compliance Support:
   No of internal audits performed based on the allocated areas from the Internal Audit Plan for 2026.