Sr. Risk, Controls & SOX Manager

Senior Risk & Controls Manager is responsible for overseeing the organization's risk management programs and controls implementation. Some of the other responsibilities include ensuring SODs and performing ICOFR in line with IPO requirements.

KEY RESPONSIBILITIES

1- Develop an annual plan and obtain approval

Measurable KPIs

Annual Risk & Controls Plan to be prepared and approved by the Audit & Risk Committee prior to the start of the following year.

• Arrange meetings with all department's heads, to discuss and agree on scope and timelines.
• Prepare and share the plan with Global Head who will obtain approval from Audit & Risk Committee.

2- Optimize the efficiency and effectiveness of Risk & Controls function

Measurable KPIs

Ensure that Risk & Controls activities are properly and timely executed as per the budgeted timeframe.

• 100% Risk & Control activities completed as per plan.
• Time to complete assignment is within the budgeted time (as defined in man-days allocation file)
• All supporting documents are arranged and saved in shared folder.

3- Develop and maintain effective follow up/monitoring

Measurable KPIs

For the Risk & Controls action plans documented, monitor the action plans due for implementation and ensure that items are timely followed up.

• Perform monthly follow-up and have status update discussion with process owners who are yet to implement agreed plans, and to verify documentation and obtain revised deadlines.
• Based on the update, issue Risk & Controls follow-up report to Global Head.

4- Continuous communication with the Audit & Risk Committee

Measurable KPIs

Quarterly Risk & Controls status update to the stake holders

Develop quarterly status update report including functions progress on approved projects/ activities, adhoc engagements performed, as well as follow up status. This will be shared with Global Head (for submission to Audit & Risk Committee).

5- Review all policies shared by Management

Measurable KPIs

Reviewing the policies to ensure they include appropriate controls and support the organization to achieve its objectives.

Review of policies submitted by the management and recommend changes in line with similar companies and best practices, while also identifying any control design gaps in the process and suggesting changes. This will be done within 5 working days (or 10 calendar days) of policy submission.

6- Consultancy services

Measurable KPIs

Perform or participate in consultancy review as and when requested by the Global Head.

Will be part of minimum 1 consulting engagements provided to the management of AIR per year.

7- Investigations

Measurable KPIs

Assist the Global Head to conduct fraud investigations

Conducting fraud investigation and issue report to Audit & Risk Committee.

8- Monitoring & guiding the Risk & Control team members

Measurable KPIs

Monitor the performance of Risk & Controls team members providing adequate guidance

Reviewing the performance and providing inputs to Global Head.

9- Annual update to Risk Appetite statement

Update the RAS on annual basis & monitor the actuals against the defined criteria.

• Obtain ARC approval on the updated RAS.
• Monitor the actuals against the defined RAS criteria, discuss the results with CEO & CFO & share the results with ARC.

10- Quarterly update to ERM risks

Measureable KPIs

Ensure ERM risks are updated on a quarterly basis and changes to risk profiles are documented for ARC/ BOD review. Prepare a presentation for the quarterly updates.

• Quarterly discussion with Risk owners to review the changes to Risk profiles.
• Update the Risk Profiles, prepare presentations for AC/ BOD updates.
• Once a year review the Risk appetite statement to identify any changes.

11- Conduct PLRA

Conduct Process Level Risk Assessments as per the documented plan. For the PLRA previously documetned, update the risk registers.

Conduct PLRA and share the results with process owners & relevant Chief of function.

12- Perform access rights & workflow reviews

Conduct access rights & workflow review (in D365) to ensure adequate segregation of duties.

Every quarter access rights review & approval workflow review report is prepared and shared with Senior Management for rectification. (i.e. ensure approvals are obtained in line with DOA & to ensure appropriate SOD).

13- Perform SOX activities in line with listing requirements

Conduct SOX assessment across the group.

SOX assessment is performed in line with requirements for listed companies & external auditors. These reports are issued to Senior Management.