About the role
- Definition of transversal practices to maintain SGGSC internal control standards, including the timely implementation of internal and external audit points together with any issues raised by external regulators.
- Definition of Operation Risk methodology and structures: Manages the structural exercises (collection of losses, scenario analysis, Risk and Control Self Assessment, KRIs), s/he issues proposals as regards to organization, governance and resources; s/he proposes improvements of procedures and evolutions of computing tools.
- Ensure all key requirements as interpreted and communicated to business are cascaded to the business units on timely basis and that sufficient actions are undertaken by business units to comply with these requirements. This should be done by the function and not the individual
- Contribute to establish robust operational risk management practices within the 4 divisions of the Risk department
- Drive the implementation of cross-functional operational risk and audit actions.
- Identify and monitor Key Result Indicators, draft and maintain risk register for the function & drive all the actions to closure.
- Deliver any ad-hoc projects or studies assigned from time to time
- Brings in consistency between teams in terms risk measurement and identification
- Information/Training/Coordination: Gives OR directives, s/he develops and coordinates the OR correspondents and the operational staff networks (information broadcasting, workshops…); s/he creates and proposes the OR contents for some training courses and runs them; s/he represents a regulatory monitoring relay.
- Prepares Dashboards on Risk exposures and updating Senior Management when need arises
- Bring awareness on Group Operational Risk Management policies and procedures
- Liaise with external & internal auditor/ inspection to ensure all audit reviews are correctly handled, all points raised are actioned.
- Conducts Risk Awareness sessions through workshops, preparing Newsletters on Risk Management, quizzes etc.
- Interact with the onshore counterpart to give a transparent view of our risks and our framework.
- Implement the Group Operational Risk Framework and ensure Internal Control Monitoring Plans are in place and aligned to the agreed Risk Control Assessments conducted for the function.
- Definition of transversal practices to maintain SGGSC internal control standards, including the timely implementation of internal and external audit points together with any issues raised by external regulators.
- Definition of Operation Risk methodology and structures: Manages the structural exercises (collection of losses, scenario analysis, Risk and Control Self Assessment, KRIs), s/he issues proposals as regards to organization, governance and resources; s/he proposes improvements of procedures and evolutions of computing tools.
- Ensure all key requirements as interpreted and communicated to business are cascaded to the business units on timely basis and that sufficient actions are undertaken by business units to comply with these requirements. This should be done by the function and not the individual
- Contribute to establish robust operational risk management practices within the 4 divisions of the Risk department
- Drive the implementation of cross-functional operational risk and audit actions.
- Identify and monitor Key Result Indicators, draft and maintain risk register for the function & drive all the actions to closure.
- Deliver any ad-hoc projects or studies assigned from time to time
- Brings in consistency between teams in terms risk measurement and identification
- Information/Training/Coordination: Gives OR directives, s/he develops and coordinates the OR correspondents and the operational staff networks (information broadcasting, workshops…); s/he creates and proposes the OR contents for some training courses and runs them; s/he represents a regulatory monitoring relay.
- Prepares Dashboards on Risk exposures and updating Senior Management when need arises
- Bring awareness on Group Operational Risk Management policies and procedures
- Liaise with external & internal auditor/ inspection to ensure all audit reviews are correctly handled, all points raised are actioned.
- Conducts Risk Awareness sessions through workshops, preparing Newsletters on Risk Management, quizzes etc.
- Interact with the onshore counterpart to give a transparent view of our risks and our framework.
- Implement the Group Operational Risk Framework and ensure Internal Control Monitoring Plans are in place and aligned to the agreed Risk Control Assessments conducted for the function.
Operational Responsibilities
· Managerial Controls:
· Provide support to business in the modification /creation of managerial controls to ensure that controls are setup in a complete, accurate and timely manner, while meeting PCT requirements. (IC)
· Anomaly management - Ensure that anomalies are effectively managed and tracked to closure (IC)
· Planning Annual sessions and creating training materials.
· Provide direction / guidance to ORM, in case of people manager
· Incident Management:
· Incidents as defined by SG policies are captured in a timely manner, proper root cause analysis is performed along with corrective/preventive actions and incidents are tracked to effective closure
· Challenge business and provide guidance when required
· Conduct awareness session
· Reviews the above activities and ensure quality of deliverables, in case of people manager
· Provide direction / guidance to ORM, in case of people manager
· Support Activities:
· Audit Support: Support Business and IGAD in the effective closure of audit recos.
· DLP / LAC / MAM: Provide support to InfoSec / ORM and ensure that these alerts are resolved in a timely and accurate manner
· Publish KI/ KRI details accurately as per the timelines
· Follow up with the business on outstanding items
· Drive his team to perform the above activities in an efficient manner (PM)
· RRM/ MRM/ Governance Meetings:
· Prepare and present RRM Decks for monthly connects with BL Heads and different stakeholders on all risk topics independently.
· Reviews the above activities and ensure quality of deliverables, in case of people manager
· Providing details required for other governance meetings like the Operational risk committees
· Reviews the above activities and ensure quality of deliverables, in case of people manager
·
· Risk Assessment:
· Independently perform assessments in timely manner and accurate manner and capture material risks that affect the process. (IC)
· TRA / NPC / RPA/ Vendor Assessment: Risk Assessments are performed in a timely, accurate and comprehensive manner (IC)
· Actions plans are discussed and agreed with Business and also presented to various stakeholders effectively. (IC)
· All Action items are tracked to effective closure (IC)
· Reviews the above activities and ensure quality of deliverables, in case of people manager
· Provide direction / guidance to ORM, in case of people manager
· RCSA:
· RCSA process is performed as per the schedule and all risks are captured. (IC)
· Challenge BL appropriately basis prior incidents, audit recos, anomalies etc to identify new risks. (IC)
· Create RCSA synthesis to be presented to BL head (IC)
· Reviews the above activities and ensure quality of deliverables, in case of people manager
· Provide direction / guidance to ORM, in case of people manager