Senior Manager, Risk & Assurance (ORM/ERM)

Alvarez & Marsal Deutschland GmbH; City of Brisbane; On-site; AUD 170,000 - 240,000; Full time

Job summary

Alvarez & Marsal, based in Australia, seeks a Manager or Senior Manager to lead complex operational and enterprise risk engagements across frameworks, testing, and remediation. You will design integrated risk architectures and drive risk identification for strategic and regulatory domains.

Responsibilities include leading RCSA workshops, validating control effectiveness, and elevating governance through risk reporting at executive and board levels. Travel may be required.

Qualifications

• Bachelor's or master's degree in business administration, finance, accounting, risk management, engineering, or a related field.
• 5+ years' experience across operational and enterprise risk management, gained in the first or second line, in internal audit, or in consulting.
• Hands-on ownership of a risk framework or its components — taxonomy, registers, appetite, KRIs and control libraries.
• Demonstrated experience running RCSAs and testing the design and operating effectiveness of controls.
• Experience with operational risk event and loss data, incident management, root cause and scenario analysis.
• Experience developing risk appetite statements, principal and emerging risk assessments, and board-level risk reporting.
• Working knowledge of ISO 31000, ISO17776 and other operational resilience regimes.
• Professional certification held or in progress such as an ERM or ISO 31000 qualification.
• Experience engaging with risk and audit committees, regulators, and second and third line functions.
• Strong communication skills, able to articulate risk and control issues to technical and non-technical audiences.

Responsibilities

• Lead the delivery of complex operational risk (ORM) and enterprise risk management (ERM) engagements end-to-end, including framework design, risk assessment, control testing and remediation.
• Design and embed integrated risk frameworks that connect enterprise-level principal risks to an operational risk taxonomy, process and control libraries, and risk registers.
• Lead top-down enterprise risk identification, covering strategic, financial, regulatory, technology and emerging risks.
• Lead and deliver Safety Culture assessments, HSE management system reviews, leadership training and coaching, and other HSE-related engagements.
• Develop risk appetite statements and cascade them into operational tolerances, key risk indicators, thresholds and escalation protocols.
• Facilitate risk and control self-assessment (RCSA) workshops with first line process owners, challenging inherent and residual risk ratings and confirming controls are mapped to the risks they mitigate.
• Assess the design and operating effectiveness of key controls through process walkthroughs and testing, identify control gaps and root causes, and agree prioritised remediation plans with clients.
• Strengthen risk governance and second line oversight — three lines of defense accountabilities, committee structures, policy frameworks, and incident and issue management — and design reporting that turns risk data into decisions at executive and board level.
• Deliver assurance activity, including control assurance, thematic and deep-dive reviews, and independent assurance over major change and transformation programs in line with recognised professional standards.
• Conduct meetings, workshops and presentations with clients and internal executive stakeholders, including at risk and audit committee level, presenting findings objectively and challenging management constructively.
• Manage, review and coach junior team members, ensuring workpapers, evidence and deliverables meet A&M quality standards.
• Develop and nurture client relationships, and contribute to the identification and pursuit of new business prospects, including proposals, pitches and thought leadership.
• Experience in areas such as Psychosocial Safety, Process Safety Management, Crisis Management, Critical Risk Management and Change Management will be advantageous.
• Previous consulting experience will be advantageous.

Skills

Leadership

Communication

Risk management

Analytical thinking

Travel willingness

Client management

Education

Bachelor's or Master's in Business Administration / Finance / Accounting / Risk Management / Engineering

Tools

Risk framework design

RCSA

Control testing

Incident management

Job description

Alvarez & Marsal, based in Australia, seeks a Manager or Senior Manager to lead complex operational and enterprise risk engagements across frameworks, testing, and remediation. You will design integrated risk architectures and drive risk identification for strategic and regulatory domains.

Responsibilities include leading RCSA workshops, validating control effectiveness, and elevating governance through risk reporting at executive and board levels. Travel may be required.