Enterprise Risk & Assurance Manager (ORM/ERM)

Alvarez & Marsal Deutschland GmbH; Sydney; On-site; AUD 140,000 - 210,000; Full time

Job summary

Alvarez & Marsal is expanding its Risk and Assurance capability in Australia, seeking a Manager/Senior Manager to lead enterprise and operational risk engagements. You will design risk frameworks, drive risk identification, appetite and tolerances, and lead workshops with clients and senior stakeholders.

The role requires 5+ years in risk management or consulting, strong communication, and a client-focused, results-driven approach.

Qualifications

• Bachelor's or Master's degree in business administration, finance, accounting, risk management, engineering, or a related field.
• 5+ years' experience across operational and enterprise risk management, gained in the first or second line, in internal audit, or in consulting.
• Hands-on ownership of a risk framework or its components—taxonomy, registers, appetite, KRIs and control libraries.
• Demonstrated experience running RCSAs and testing the design and operating effectiveness of controls.
• Experience with operational risk event and loss data, incident management, root cause and scenario analysis.
• Experience developing risk appetite statements, principal and emerging risk assessments, and board-level risk reporting.
• ISO 31000 knowledge and professional certifications such as ERM are advantageous.

Responsibilities

• Lead the delivery of complex ORM and ERM engagements end-to-end, including framework design, risk assessment, control testing and remediation while managing quality, budget and timelines.
• Design and embed integrated risk frameworks that connect enterprise-level principal risks to an operational risk taxonomy, process and control libraries, and risk registers.
• Lead top-down enterprise risk identification, covering strategic, financial, regulatory, technology and emerging risks.
• Lead and deliver Safety Culture assessments, HSE management system reviews, leadership training and coaching, and other HSE-related engagements.
• Develop risk appetite statements and cascade them into operational tolerances, key risk indicators, thresholds and escalation protocols.
• Facilitate RCSA workshops with first line process owners, challenging inherent and residual risk ratings and confirming controls are mapped to the risks they mitigate.
• Assess the design and operating effectiveness of key controls through process walkthroughs and testing, identify control gaps and root causes, and agree prioritised remediation plans with clients.
• Strengthen risk governance and second line oversight — three lines of defense accountabilities, committee structures, policy frameworks, and incident and issue management — and design reporting that turns risk data into decisions at executive and board level.
• Deliver assurance activity, including control assurance, thematic and deep-dive reviews, and independent assurance over major change and transformation programs in line with recognised professional standards.
• Conduct meetings, workshops and presentations with clients and internal executive stakeholders, including at risk and audit committee level, presenting findings objectively and challenging management constructively.
• Manage, review and coach junior team members, ensuring workpapers, evidence and deliverables meet A&M quality standards.
• Develop and nurture client relationships, and contribute to the identification and pursuit of new business prospects, including proposals, pitches and thought leadership.
• Experience in areas such as Psychosocial Safety, Process Safety Management, Crisis Management, Critical Risk Management and Change Management will be advantageous.
• Previous consulting experience will be advantageous.

Skills

Operational risk management

ERM

Risk governance

Client relationships

Communication skills

Leadership

Education

Bachelor's or Master's in business/finance/risk management/engineering

Tools

RCSA

ISO 31000

Job description

Alvarez & Marsal is expanding its Risk and Assurance capability in Australia, seeking a Manager/Senior Manager to lead enterprise and operational risk engagements. You will design risk frameworks, drive risk identification, appetite and tolerances, and lead workshops with clients and senior stakeholders.

The role requires 5+ years in risk management or consulting, strong communication, and a client-focused, results-driven approach.