Role Purpose:
Responsible for designing, implementing, and managing Governance, Risk, and Compliance (GRC) frameworks across the AHC and its subsidiaries. The role ensures enterprise-wide compliance with regulatory standards, effective risk management, and adherence to governance principles, supporting the organization's strategic objectives.
Key Accountabilities:
1- Strategy
- Designing and implementing a robust governance, risk, and compliance framework that aligns with the organization's overall strategic objectives.
- Identifying and assessing strategic risks that could impact the long-term success and sustainability of the organization.
- Ensuring that governance, risk management, and compliance activities are integrated into the organization's strategic planning processes.
- Ensuring that the organization's compliance activities support its long-term objectives while managing legal, regulatory, and policy risks.
- Offering insights to support strategic decision-making processes, ensuring that risks are adequately considered and managed.
- Leading the execution of key GRC-related programs that contribute to the achievement of the organization's strategic goals.
- Regularly reviewing and improving the GRC strategy to ensure that it evolves in response to changes in the business environment or strategic direction.
2- Function
- Develop and maintain governance frameworks and policies for the AHC and its subsidiaries.
- Ensure that governance practices align with the AHC's corporate strategy and ethical standards.
- Establish and oversee risk management frameworks, identifying and mitigating enterprise risks
- Conduct risk assessments and implement control measures to manage operational, financial, compliance and all risk categories.
- Ensure the effectiveness of internal controls and facilitate risk reporting to senior leadership.
- Ensure compliance with applicable laws, regulations, and industry standards across all entities, lead compliance audits and investigations, addressing any findings with corrective actions, and monitor regulatory changes and update policies and procedures accordingly.
- Prepare comprehensive GRC reports for senior management, the board, and audit committees.
- Promote a culture of governance, risk awareness, and compliance through training and communication initiatives
- Leverage GRC technology and tools to improve monitoring and reporting efficiencies
- Stay informed of emerging risks and develop proactive strategies to address them.
3- Risk Assessment & Mitigation
- Undertake special reviews and projects at AHC and Strategic Business Unit level as per the GRC Committee's directives such as fraud investigations, compliance activity, or risk management facilitation.
- Ensure all compliance reports present information that meets the relevant requirements for consistent and thorough reporting on the effectiveness of internal controls, risk management and governance processes including provision of the status of implementation of compliance actions.
- Identify and report risk management issues and internal controls deficiencies directly to the GRC Director and provide recommendations for improving the organization's operations, in terms of both efficiency and effectiveness of performance.
4- People Management
- Manage day-to-day activities and operations, including implementation of all policies and procedures, and recommend potential improvements where appropriate.
- Assist the GRC Director in the development of the ERM governance and infrastructure.
- Provide input to the GRC Sector's strategy from the ERM Department's perspective in line with AHC's overall vision and mission.
- Develop the ERM department's objectives, KPIs, annual operational plans, and ensure plan execution is meeting the targets.
- Manage the achievement of the ERM Department's objectives through effective leadership and by setting individual objectives, managing performance, and motivating the team to maximize performance.
- Ensure effective staffing, professional and talent development, and deployment of the ERM team across all sections in consultation with the GRC Director
Job Specifications:
- Bachelor's degree in business administration, Law, Risk Management, or a related field.
- 7 - 8 years of experience in the GRC or Compliance Sectors, or equivalent working experience in a medium to large-sized company.
- GRCP, GRCA, IPMP, Compliance professional Certifications
