Manager, Risk Strategy & Oversight, Enterprise Risk Management

Job Description

EFU Life Assurance Ltd. is seeking an experienced Manager for Risk Strategy and Oversight within its Enterprise Risk Management (ERM) team. The successful candidate will lead the development, enhancement, and implementation of the companys ERM framework. This role involves embedding risk-informed decision-making processes across the enterprise, strengthening governance structures, and enabling proactive identification, monitoring, and mitigation of risks to ensure alignment with regulatory expectations and the company's strategic objectives. The Manager will oversee a team of five professionals, providing leadership and fostering a high-performance culture that enhances risk management capabilities and ensures effective risk ownership throughout all business functions. This position demands a thorough understanding of Enterprise Risk Management best practices, regulatory compliance, and risk mitigation strategies. The Manager will be responsible for risk policy management, risk governance, and the continuous enhancement of risk frameworks including risk appetite integration, key risk indicators, and incident reporting systems. They will collaborate closely with senior management and the Board Audit Committee by preparing comprehensive risk reports and ensuring that risk considerations are embedded in routine business decisions. The role also involves driving digital transformation initiatives within the ERM function by evaluating and implementing technology solutions to improve risk register management, incident reporting, and key risk indicator monitoring. This is a strategic leadership role requiring strong analytical skills, stakeholder management, and expertise in risk frameworks such as COSO and ISO 31000.
Responsibilities
 

• Lead the continuous development and periodic enhancement of the ERM framework, ensuring compliance with regulatory requirements and alignment with industry best practices.
• Develop, review, and maintain comprehensive risk management policies and procedures that support the companys risk appetite and governance standards.
• Embed risk appetite frameworks into critical business processes and assist stakeholders in integrating risk considerations into decision-making.
• Prepare and present high-quality risk reports, dashboards, and presentations for senior management and the Board Audit Committee to communicate key risks, emerging threats, and risk mitigation progress.
• Lead risk governance activities including organizing and supporting risk management committees, ensuring effective escalation and follow-up on risk-related action items.
• Oversee the enterprise-wide risk register, ensuring consistent risk identification, assessment, and documentation across all departments, adherence to defined review cycles, and uniform risk rating methodologies.
• Design, develop, and enhance key risk indicators (KRIs) across major risk categories, defining thresholds aligned with risk appetite and implementing escalation protocols when thresholds are breached.
• Identify and assess strategic and emerging risks including economic, regulatory, technological, and competitive factors, supporting scenario analysis and forward-looking risk assessments to inform strategic initiatives and product development.
• Conduct comprehensive risk reviews on critical processes, new business initiatives, and major strategic decisions, tracking implementation of agreed mitigation actions to ensure risk reduction.
• Manage the incident reporting and management framework to drive company-wide incident capture, root cause analysis, and identification of systemic issues for timely remediation.
• Lead initiatives focused on digital transformation within the risk function by evaluating and implementing advanced technology solutions for risk register management, incident reporting, and monitoring KRIs through dashboards and automation.
• Implement pilot control testing programs to assess the design and operating effectiveness of key controls, partnering with Internal Audit to ensure coordination and avoiding duplication of efforts.
• Establish and promote training programs focused on ERM frameworks, risk registers, KRIs, and international standards such as COSO ERM and ISO 31000 to build risk management capabilities across the organization.
• Encourage and sustain a proactive risk culture by fostering clear risk ownership at all functional levels and supporting the development of a Risk Champions network to embed risk awareness throughout operations.
• Provide leadership and mentorship to a team of five risk professionals, driving a collaborative environment that emphasizes technical excellence and strategic risk thinking