Assistant Manager, Enterprise Risk Management

UEM Sunrise Berhad; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

UEM Sunrise Berhad is seeking an experienced professional to support the implementation and operationalisation of Enterprise Risk Management (ERM) across the organisation. You will contribute to risk assessments, reporting, governance, analytics, advisory, and risk culture initiatives.

You will work with the Integrity & Risk Management team to provide timely risk insights to Management, the Board Committees and the Board of Directors, ensuring proactive management of strategic risks.

Qualifications

• Bachelor's degree in business, finance, administration, economics or related field.
• At least 4 years of ERM, governance, risk & compliance, internal controls, internal audit, risk advisory or risk consulting experience.
• Strong knowledge of ERM frameworks (COSO ERM, ISO 31000).
• Ability to facilitate and conduct risk assessments across diverse business functions.
• Proficiency in risk reporting, risk analytics, and data visualisation.
• Understanding of RCSA design and implementation.
• Familiarity with sustainability and climate risk reporting is an advantage.
• Strong analytical and communication skills.
• Strong stakeholder management and influencing skills.

Responsibilities

• Facilitate identification, assessment, prioritisation and review of enterprise-wide risks to build a current risk profile.
• Assist in preparing enterprise risk reports, dashboards and insights for Management and BGRC/Board discussions.
• Maintain and enhance risk registers, mitigation plans and tracking across units.
• Coordinate identification, review, monitoring and reporting of Top Risks and mitigation plans.
• Support development and implementation of ERM methodologies, risk criteria and templates.
• Lead Risk and Control Self-Assessment exercises across units.
• Support establishment of risk appetite metrics, KRIs, triggers and escalation.
• Monitor sustainability and climate risk reporting per regulatory requirements.
• Track emerging risks, market/regulatory changes and industry practices.
• Promote risk culture through workshops, training and engagement.
• Undertake risk benchmarking and external research as required.

Skills

ERM knowledge

Risk reporting

Risk analytics

RCSA design

Stakeholder management

Communication

Independent work

Education

Bachelor's degree in business/finance/administration or related

Tools

COSO ERM framework

ISO 31000

Job description

To support the implementation and operationalisation of Enterprise Risk Management (ERM) across UEM Sunrise Berhad through risk assessments, risk reporting, risk governance, risk analytics, risk advisory, and risk culture initiatives. The role supports the Integrity & Risk Management team in enabling the organisation to manage risks proactively in line with its strategic objectives. It also contributes to the provision of clear, timely, and relevant risk insights to Management, Board Committees, and the Board of Directors.

Responsibilities

• Facilitate the identification, assessment, prioritisation, and review of enterprise-wide risks to support a comprehensive and current risk profile for the organisation.
• Support the preparation of enterprise risk reports, risk dashboards, and risk insights for Management, Board Governance & Risk Committee (BGRC), and Board deliberations, ensuring timely and quality submissions.
• Maintain, update, and enhance enterprise risk registers, risk mitigation action plans, and risk tracking mechanisms across business units.
• Coordinate the identification, review, validation, monitoring, and reporting of enterprise Top Risks, including tracking emerging risks, risk movement, mitigation effectiveness, and management action plans.
• Support the development, enhancement, review, and implementation of enterprise risk management methodologies, frameworks, risk assessment criteria, risk matrix, likelihood and impact parameters, and related tools and templates.
• Lead and coordinate periodic Risk and Control Self-Assessment (RCSA) exercises to evaluate risk exposure, control effectiveness, and mitigation adequacy across business units.
• Support the establishment and monitoring of risk appetite metrics, risk tolerance levels, key risk indicators (KRIs), trigger thresholds, and escalation protocols across the organisation.
• Support the identification, assessment, monitoring, and reporting of sustainability-related risks, including climate-related risks, in alignment with applicable regulatory and reporting requirements (including IFRS S1 and S2).
• Monitor and assess emerging risks, external developments, market trends, regulatory changes, and industry practices that may impact the organisation's strategic objectives and risk profile.
• Support the design and implementation of risk culture initiatives, including maturity assessments, awareness programmes, surveys, communication strategies, and capability-building activities.
• Promote risk awareness and a proactive risk management culture through targeted workshops, training, and engagement with business units.
• Undertake risk benchmarking, external research, and any other assignments as required by Management.

Qualifications

• Bachelor’s degree in business, finance, business administration, economics or any related discipline.
• At least 4 years of relevant working experience in Enterprise Risk Management, Governance, Risk & Compliance, Internal Controls, Internal Audit, Risk advisory or risk consulting roles
• Strong knowledge of ERM frameworks and methodologies (e.g. COSO ERM, ISO 31000)
• Ability to facilitate and conduct risk assessments across diverse business functions
• Proficiency in risk reporting, risk analytics, and data visualisation
• Understanding of RCSA design and implementation
• Familiarity with sustainability and climate risk reporting frameworks is an advantage
• Strong analytical and critical thinking skills
• Effective communication and presentation skills
• Strong stakeholder management and influencing skills
• Ability to work independently and as part of a team
• Commitment to promoting risk culture and awareness