Brief Posting Description

Reporting to the HOD- Enterprise Risk Management the role holder will support the ERM function in the facilitation of Operational and Strategic risk assessments, conducting reviews on the implementation of risk mitigation action plans and preparing summary report of findings. To assist in the development and implementation of the new business risk management strategy that aligns and supports the organization’s strategy. Support implementation of the Governance Risk and Compliance (GRC) solution across the organization. Facilitating ad hoc risk assessments as required.

Job Responsibilities

• Develop and Implement Strategic and Operational Risk Assessments plan on an annual basis.
• Identify key stakeholders both internal & external that impact the delivery of the ERM Framework and ensure full alignment and engagement.
• Keep abreast of all key ERM developments within the Telecommunication industry-locally, regionally and internationally.
• To ensure potential new and emerging risks and threats are highlighted and reported to management on a quarterly basis.
• Conduct on a regular basis operational risk assessment for projects, products, processes and any ad hoc assessment as requested by the business.
• Work with the business to conduct Risk assessments and ensure the Risk owners follow through with the mitigations agreed in the GRC system
• Collate companywide risk summary to be presented to Senior Management and Board Audit Committee
• Plan and conduct appropriate Risk Management awareness initiatives across the business to ensure risk appreciation and upscale the risk culture.
• Support the business in the implementation of the GRC solution through walkthrough sessions and refresher sessions as and when requested.
• Support the business in adhoc risks assessments and offer risk advisory when needed
• Identify opportunity areas for the business and give recommendations for implementation.
• Supporting implementation of various ISO standards in the business that are risk based.
• Supporting Safaricom subsidiaries in enterprise risk management.

QUALIFICATIONS

• Upper second-class degree in Business or Commerce from a recognized University
• Risk Management certification – Cert IRM, Dip IRM, ISO 31000
• Relevant post-graduate education is an added advantage
• At least 5 years working experience in a risk management position.
• Detailed knowledge of cross functional operations and impact of one department to another
• Excellent report writing, interpersonal skills and presentation skills