The role will be responsible for supporting the implementation, monitoring, and continuous improvement of the organization's Enterprise Risk Management framework as well as independently plan, execute and report risk-based assurance/audit engagements across the company/group, in line with the approved annual Internal Audit Plan and ad hoc assignments directed by the Director/Senior Manager-Risk & Assurance.
This role ensures alignment with corporate policies and frameworks to identify, manage and mitigate risks, maintain business continuity, and improve resilience. The role supports annual audit plan construction providing risk area inputs, data analytics enabled testing, special reviews and investigations, and the enhancement of Group policies, procedures and governance frameworks. It exercises independent professional judgement in setting testing approaches, evaluating control effectiveness, recommending ratings and proposing workable remediation. The role influences Management to accept Risk Management related inputs, audit findings to implement actions plan, and communicates outcomes to senior stakeholders, including the Department Heads, CEO, and the Managing Director, through formally drafted reports and correspondence.
Risk Management
- Support the Risk and Assurance Department in the development and execution of risk management framework.
- Perform risk assessments and maintain strategic and operational risk registers.
- Contribute in establishing and quantifying the organization's risk appetite and risk maturity profile.
- Integrate risk management into the operational as well as strategic management process.
- Facilitate development & monitoring of risk mitigation action plans.
- Contribute in conducting risk management workshops to build awareness and improve identification of risks across the organization.
- Monitor emerging risks, industry trends, and regulatory developments.
- Help maintain and update risk registers by collaborating with relevant business units.
Assurance & Business Excellence
- Independently plan and execute assigned risk-based assurance engagements under the approved annual plan or on an ad hoc basis across the company/group, covering scoping, fieldwork, testing, issue validation and reporting.
- Agree engagement timelines and milestones with the Director – Risk & Assurance / Senior Manager – Assurance and deliver within deadlines with minimal supervision.
- Evaluate the design and operating effectiveness of internal controls across assigned processes.
- Perform detailed testing of transactions, approvals, reconciliations and compliance requirements, including forensic, related-party and contract-compliance reviews.
- Identify control gaps and process weaknesses, quantify exposure where relevant, and frame evidence-based recommendations.
- Assist in conducting investigations related to fraud, including theft, ethical breaches, corruption, and policy violations, and recommend appropriate corrective action.
- Draft audit observations, working papers, internal audit reports and executive summaries.
- Recommend risk ratings, root cause and control weakness.
- Use SAP data, spreadsheets and analytics techniques to extend testing coverage and detect unusual transactions, trends & exceptions.
- Support the review and updating of risk and compliance policies and procedures
- Contribute in understanding of the processes in redesigning and streamlining of the business processes.
- Contribute in business transformation initiatives for efficiency and effectiveness.
Communication & Professional Development
- Engage with process owners, line managers, functional heads and entity management during assignments for information, issue discussion and closure.
- Influence stakeholders to accept findings, ratings and corrective actions, and agree realistic implementation timelines.
- Maintain professional working relationships while preserving independence and objectivity.
- Proactively pursue professional development opportunities to enhance technical and leadership capabilities
