Show more filters
What You'll Do
Enterprise Risk Management Framework & Governance
Drive the execution and continuous enhancement of NCS's Enterprise Risk Management (ERM) framework, ensuring consistent implementation of risk policies, procedures, and governance processes across Business, Geographical, and Corporate units.
Partner with business and functional stakeholders to facilitate enterprise risk assessments, maintain risk registers, and produce reports that provide meaningful insights into key and emerging risks.
Proactively identify control, governance, and process improvement opportunities, and provide risk advisory to stakeholders on effective risk mitigation strategies.
Risk Culture & Capability Building
Design and deliver risk management training, workshops, and awareness programmes to strengthen risk culture, capability, and ownership across the organisation.
Act as a trusted advisor to Our People, empowering them to understand and manage risk in their day-to-day activities.
Risk Monitoring & Analytics
Establish, enhance, and monitor Key Risk Indicators (KRIs) to enable proactive risk monitoring, trend analysis, and early detection of emerging risks.
Leverage data analytics, automation, and technology-enabled solutions to enhance risk monitoring, reporting, predictive insights, and operational efficiency.
Risk Appetite & Strategic Integration
Drive the development, implementation, and continuous refinement of the Risk Appetite and Tolerance framework, partnering with senior leadership to embed risk considerations into strategic planning and business decision-making.
Controls Assurance & Business Continuity
Drive the implementation of a risk-based controls assurance programme to assess the design and operating effectiveness of key controls across critical business processes and risk domains.
Support the continuous enhancement of NCS's Business Continuity Management (BCM) and Crisis Management framework, and strengthen capabilities across regional units while addressing local regulatory, operational, and business requirements.
Risk Reporting & Stakeholder Engagement
Prepare high-quality risk reports, dashboards, and presentations for senior management, executive committees, and Board-level forums, highlighting key risk exposures, trends, and recommendations.
Communicate complex risk concepts clearly and confidently to diverse audiences, ensuring alignment and informed decision-making.
Qualifications
What We're Looking For
Experience & Qualifications
Degree in Risk Management, Business, Finance, Information Technology, or a related discipline.
Professional certifications such as Certified Risk Manager (CRM), Certified in Risk and Information Systems Control (CRISC), or equivalent are highly desirable.
Minimum 5–8 years of experience in enterprise risk management, internal audit, compliance, or governance roles, preferably within a technology services, consulting, or complex organisational environment.
Proven experience in developing and implementing ERM frameworks, risk appetite statements, and controls assurance programmes.
Technical & Functional Skills
Strong understanding of risk management methodologies, frameworks (e.g., ISO 31000, COSO ERM), and industry best practices.
Experience in Business Continuity Management (BCM), Crisis Management, and regulatory compliance.
Proficiency in data analytics, risk reporting tools, dashboards, and automation technologies to drive insights and efficiency.
Ability to conduct risk assessments, develop KRIs, and translate risk data into actionable recommendations.
Personal Attributes
Strategic thinker with strong analytical and problem-solving skills.
Excellent stakeholder management and communication skills, with the ability to influence and engage at all levels of the organisation.
Proactive, detail-oriented, and able to manage multiple priorities in a fast-paced environment.
Passionate about building a strong risk culture and empowering others to take ownership of risk management.
Collaborative team player who values diverse perspectives and fosters inclusive dialogue.
