Senior Manager Risk Management & Compliance at Auditor-General of South Africa

Roles & Responsibilities

Risk strategy

• Establish and communicate the organisation’s ERM objectives and direction
• Integrate risk management with the strategy development process
• Develop and communicate risk management policies, risk appetite and risk limits
• Develop risk mitigation strategies for the organisation’s critical risks and for monitoring these risks
• Establish, communicate and facilitate the use of appropriate ERM methodologies, tools and techniques
• Liaise with business units to establish, maintain and continuously improve risk management capabilities
• Facilitate enterprise-wide risk assessments and monitors priority risks across the organisation
• Conduct research and identify risk factors that can adversely impact on AGSA programs/projects
• Develop and implement risk management strategy/ framework and fraud prevention plan in the organization
• Develop and implement risk mitigation strategies and processes, thus managing risk
• Communicate and reinforce risk prevention strategies
• Manage strategy risk in the following portfolios financial risks, customer, brand and reputation risk, supply chain, environmental risk, human resource risk and information risk
• Manage routine operational and compliance risk to ensure standardisation of processes

Risk identification

• Manage, plan and coordinate compliance monitoring programme on Core and support programs throughout the organization
• Develop and implement risk identification and escalation processes to identify on high risk areas, escalating such to Exco
• Facilitate the development of contingency plans
• Contribute to the application /management/ compliance of internal policies within the Corporate Office.
• Identify and manage major plausible risks inherent in the strategy
• Monitor and review processes to ensure risk and compliance arrangements are in place

Compliance

• Conducting audits of policy and compliance to standards, including liaison with internal and external auditors
• At a strategic level, contribute to process mapping in order to understand business processes and linkage to areas of risk
• Drive a compliance monitoring programme to ensure the maintenance of effective internal controls
• Ensure processes are implemented that provide assurance on compliance with legislative frameworks, organizational policies, processes and procedures
• Align management approvals/delegation of authority to the organisation’s risk appetite
• Manage the appointment of internal and external auditors for effective compliance monitoring program
• Manage the execution of the internal audit coverage plan
• Implement appropriate risk reporting to the DAG, EXCO and senior management
• Ensure effective alignment between the ERM process and internal audit

Stakeholder engagement

• Conduct risk management education and training from time to time
• Ensure that a culture of effective risk management is continuously communicated and reinforced
• Communicate risk management strategies with all stakeholders
• Conduct road-shows with all stakeholders (internal and external) to sensitise them on AGSA risk management strategies

People Management

Manage human resource in the centre which involves:-

• Facilitate the provision of adequate staffing within the centre
• Coordinate the development of job descriptions, job evaluation of posts within the centre
• Manage performance of employees
• Coordinate the development of employee competencies to be in line with the MQF within the centre

Financial Management

• Manage and report on the centre budget in accordance with the approved finance policies

Ad hoc projects

• Perform all BUL’s projects as and when required

Skills, Experience & Education

• Bachelors Honours Degree in business management, commerce, Risk Management or equivalent qualification

Knowledge

• ISO31000, COSO, and CISA framework

Experience

• 10 to 15 years’ experience in enterprise risk management, compliance, assurance and internal controls. Preferably 5 year experience in a middle management level