Chief Risk Officer at Vodafone Global Enterprise

Role purpose:

• The Chief Risk Officer (“CRO”) leads  the management of enterprise risks, corporate security and first party insurance strategies for Vodacom Group Limited (“Vodacom Group”), in compliance with regulations governing  a publicly listed company, while taking onboard the interests of all stakeholders, i.e., customers, employees  , shareholders, suppliers and key partners in all markets where Vodacom Group has operating companies .  
• The CRO ensures that Vodacom Group has adequate risk management programmes in place through focusing on risk management policy governance and processes, as well as monitoring and reporting risks, including  maintaining controls and overseeing compliance. The CRO also ensures that Vodacom has adequate fraud, security, and business continuity programmes in place to detect and mitigate risks as and when they manifest themselves.
• The CRO leads and manages a team of Risk & Corporate Security professionals overseeing the development of risk management plans and activities as well as creating awareness and putting together training programmes, including recommendations on systems and controls enhancements. 

Your responsibilities will include:

Risk Management:

• Accountable for developing and implementing Enterprise Risk Management (ERM) framework to ensure a consistent approach across markets in identifying and managing risks and in so doing protects Vodacom Group’s reputation and drive growth through efficiency gains, 
• Chair Vodacom Group’s Risk Management Committee (“RMC”).
• Ensures risks identified, with mitigating actions, are reported to Vodacom Group’s Audit, Risk and Compliance Committee (“the ARCCC”) and the Vodacom Group Board and published in the annual integrated report.
• Leads and manages a senior team of Risk executives, and ensures that they deliver on the activities of the Risk Management function in accordance with the applicable regulations and legislations, including Codes of Good Practice such as King IV

Corporate Security:

• Ensures the company has necessary and appropriate systems and controls in place to detect and investigate fraud.
• Ensures the company has necessary and appropriate systems and controls in place to facilitate interception and monitoring when served with legal subpoena by law enforcement agencies.
• Ensures the company has the necessary and appropriate business continuity management (BCM) tested plans and controls for recovery in the event of a disaster to avoid and/or mitigate disruptions to the business and its operations.  
• Acts as Crises Team lead for Vodacom’s Crises Committee when a crisis is invoked.
• Ensure the company has the necessary and appropriate controls and systems in place to protect the staff, property  and network.
• Leads and manages a senior team of Corporate Security executives and ensures that they deliver operations and activities of Corporate Security.

First Party Insurance: 

• Ensure company buy adequate insurance to transfer some of the risks that cannot be mitigated such as property damage and business interruption, political violence, crime, general legal liability, cyber, directors and officers, credit e.t.c.
• Managing the Vodacom Group’s cell captives; 

Legal Compliance Reviews & ISO Internal Audits:

• Through a risk-based approach perform legal compliance reviews of high-risk laws and regulations in all markets to ensure that Vodacom Group complies with all relevant laws and regulations.
• Perform internal audits for ISO certifications such ISO 9001 (Quality), ISO 14001 (Environment) e.t.c.
• Manage and ensure that all legal non-compliance and ISO audit findings are identified, reported and closed. 

General Machinery Regulation and electrical safety:

• Act as a section 16(2) appointment in terms of South African Health & Safety Act.
• Ensures through monitoring and auditing that Vodacom South Africa (VSA) complies to general machinery and electrical regulations.
• For VSA, CRO and team have a direct line and management responsibility for above.  For the International Business (IB) Markets, Egypt, Kenya and Ethiopia, CRO and team have an oversight and supporting role  for the above. CRO will have accountability for the budget/finances in Vodacom Group and VSA
• CRO serves as a director on the Board of the Communication Risk Information Centre (“COMRIC”) as a VSA representative. 

Leadership:

• Be an ambassador of the Spirit of Vodacom by role modelling the behaviours of 1) getting it done together, 2) earning customer loyalty, 3) creating the future, 4) experimenting and learning fast.
• Ability to inspire and motivate teams across multiple geographies, as well as building talent pipelines for future succession,
• Serve as Group functional lead for all Risk & Corporate Security roles across the IB Markets, VSA, Kenya, Ethiopia and Egypt.
• Act as a role model, influencing at all levels, effectively sharing the commercial vision to inspire teams.
• Openly demonstrates self-awareness and commitment to improvement of self and others.

The ideal candidate for this role will have:

Must have technical/professional qualifications:

• 4-year relevant university degree such as Accounting Honours or LLB.
• Masters degree in Risk Management will be an advantage
• Professional qualification such as CA(SA), Certified Risk Management Professional (CRM Prof), and admitted Attorney or Advocate of the High Court.
• 10-15 years professional experience 
• First party Insurance experience will be an advantage
• Strong communication skills and ability to interact with people under stressful conditions.
• Strong analytical skills and be able to identify trends and weaknesses and to recommend/take measures.

Core competencies, knowledge, and experience:

• Experience of leading risk and corporate security as part of a senior leadership team.
• Strong influencing skills with proven experience in building sustainable relationships to drive risk and corporate security outcomes.
• Experience in defining and implementing a risk strategy and leading the implementation thereof.
• Comprehensive knowledge risk management and governance frameworks like ISO 31000 and King IV.
• Broad understanding of first party insurance, forensic accounting and physical security.
• Controlling risk - Develops strategic and operational plans to manage risk resulting from existing and emerging legal, regulatory, and ethical obligatiions.
• Risk Assessments- Ability to identify and understand emerging risks and apply the risk management approach. 
• Understanding of the process of Risk identification, assessment and reporting.
• Risk management process- Drive integration and standardisation of risk management processes across the organisation. 
• Advise on the application of the organisation’s risk management policies, industry best practices and develop organisation guidelines. 
• Analyse trends in risk management and internal controls, consider implications and implement organisation-wide responses.
• Understanding of working in global organisations
• Strong people management skills