Chief Risk Officer (CRO) at SAFCOL (South African Forestry Company Limited)

Key Accountabilities

• Develop and implement an Enterprise Risk Strategy that is aligned with the overall Business Strategy
• Ensure a fit-for-purpose Risk Management Strategy & Governance Framework is in place for SAFCOL that is relevant to the needs of customers & revenue generation requirements and target cost to serve
• Design and own the end-to-end Risk Operational Infrastructure Platform for SAFCOL (incl. its subsidiaries), in accordance with the Enterprise Risk Management Framework (ERMF), ensuring the Risk Operating Model in Minimum Capital Requirement (MCR) is fit for purpose
• Oversee the development of Land Use and Business Sustainability Strategy aligned with the overall Risk Strategy
• Oversee the creation of a Land Use and Business Sustainability Plan that mitigates the risk of business interruption to the Company’s core activities due to the Land Reform Programme
• Drive the execution of operational risk and governance in SAFCOL so that offerings are innovative and competitive, whilst maintaining and protecting the quality of SAFCOL’s asset book
• Centralise the accountability and provide oversight of multiple functional areas that include Environmental Management, Governance and Control, Conformance, Business Continuity, Security, Compliance & Occupational Health & Safety with a view on current trends and future projections
• Drive partnership with SAFCOL Internal Audit and Divisional management during the scoping of audits to ensure fair coverage
• Provide oversight into the Business Development and Project Management process to ensure that all risks have been considered and sufficiently addressed
• Centralise the accountability and provide oversight of multiple functional areas that include Environmental Management, Governance & Control, Conformance, Business Continuity, Security, Compliance & Occupational Health and Safety with a view on current trends and future projections
• Ensure effective alignment between the ERM process and Internal Audit & Risk financing
• Ensure that the Business Continuity Tool is in place, updated regularly, and signed off annually
• Ensure the development of Risk and Control Self Assessments (RCSA’s) & Critical Process Assessments (CPA’s) for the Function is facilitated and updated at the required intervals (normally quarterly). Complete attestations to testify to the adequacy of controls on request
• Ensure Risk Control unit to proactively manage business risks and provide an early warning system to the MCR Risk Senior Management
• Present the Function’s requirements in Group meetings such as the EXCO level, Operational Risk Committee, and others as required. Obtain a clear understanding of the Compliance & Regulatory requirements that have an impact on the SAFCOL business and communicate these requirements to the organisation
• Set a budget for the Division, including the setting of goals and targets
• Rigorously monitor expenditures against approved budgets and put measures in place to address variances. Continuously identify areas for improved efficiency and reduced cost
• Establish risk appetite in conjunction with the business, to ensure that SAFCOL maintains exposure in line with this appetite based on a balanced risk/reward decision
• Partner with Company key stakeholders to obtain a commercial awareness of the local market and industry specifics leading to improved customer and/or business solutions, and ensure the appropriate Operational Risk Management and governance is in place
• Ensure the development and update of the BCM Tool, with the latest plan and relevant stakeholders' contact information on a monthly basis, or when necessary
• Drive the development and maintenance of SAFCOL’s Business Sustainability Management Program related to Land Restitution and other Land Reform Programmes
• Provide management oversight and direction for both physical and logical aspects of security, including information security
• Ensure SAFCOL’s Information security (InfoSec) policies, supporting standards and procedures are in place and implemented
• Direct SAFCOL’s entire Security Framework, including the Information Security Controls at all Company locations mediated through the Regional Security Committees
• Ensure Safety & Security Frameworks, protocols and policy are in place for the Group
• Ensure that special investigations on security breaches and security risk assessments are conducted
• Oversee the monitoring and evaluation of security contracts and SLA
• Ensure the development of a high-performing team through embedding formal Performance Development and informal coaching
• Develop appropriate Employee Engagement Survey action items together with the management team of the Business Unit and ensure that items are executed with business impact
• Oversee the SHEQ activities of the Group and provide direction and leadership to divisions and plantations to ensure that the relevant standards and systems are implemented in relation to Group and ISO standards
• Lead the development of an Annual Business Plan for the SHEQ department
• Ensure adherence to sustainability practices and environmental improvement initiatives
• Oversee the implementation of appropriate monitoring criteria to measure SHEQ performance at strategic and operational level

Qualifications, Experience & Other

• A Master’s degree or Equivalent (NQF Level 9) qualification
• Business Continuity, Information Security, Risk, and Ethics qualifications – will be an added advantage
• A minimum of 10 - 12 years in Risk Management, Enterprise Risk, Manufacturing, Climate Change Management, Compliance, Safety, Security & Business Continuity, Land Claims Management, or similar experience
• Experience in managing Control, Risk, Operations, Health & Safety, Security or Project Management environments
• At least 5 years’ experience operating at a senior management level
• Knowledge and familiar with Treasury Regulations
• Working knowledge of the PFMA and other public sector governance frameworks
• Membership with relevant professional bodies, i.e. Institute of Risk Management South Africa (IIRMSA) & Institute of Internal Auditors (IIA)
• Legislation knowledge and understanding are critical and key i.e., Companies Act, PFMA, Management of State Forest Act, National Forestry Act, Competition Act
• Understanding King IV Report
• Valid Driver’s Licence