Head of Group Risk Management - MY878783

Morgan Philips Group; Selangor; On-site; MYR 320,000 - 520,000; Full time

Job summary

Morgan Philips Malaysia is seeking a senior risk leader to own the enterprise risk framework for the Group, challenging the business when it matters and serving as the senior risk voice to the Board and executive team.

You will sit alongside projects, contracts, and operations to balance growth, resilience, and performance, building a high-performing risk team and embedding risk-aware decision-making across the organization.

Qualifications

• 15+ years in enterprise, operational, project, or commercial risk, business continuity, or insurance and risk transfer, including 5+ years leading a function.
• Deep experience in energy, oil and gas, engineering, construction, manufacturing, chemicals, or another asset-intensive, project-driven industry.
• Proven record of building ERM frameworks, governance, and risk-appetite structures from the ground up.
• Hands-on exposure to major projects, contracts, supply chains, and business interruption.
• Ability to challenge CEOs, C-suite leaders, and Board Committees constructively.

Responsibilities

• Own risk for the entire Group and lead the enterprise risk framework.
• Govern major high-risk projects from tendering through execution to close-out.
• Lead BCM and organisational resilience with tested and updated plans.
• Oversee the Group's insurance programme and risk transfer alignment.
• Independently assess third-party, KYC, and sanctions risk with escalation as needed.
• Develop risk reporting with KRIs and forward-looking Board/ELT insights.
• Provide strategic risk advice on investments, acquisitions, tenders, and major decisions.
• Build and coach a high-performing risk function and culture.

Skills

Enterprise risk

Project risk

Business continuity

Insurance and risk transfer

Leadership experience

Stakeholder engagement

Risk analytics

Board communication

Education

Bachelor's degree in risk management, business, engineering, finance, economics

Job description

Confidential search | Morgan Philips Malaysia

About the Group

A large, publicly listed conglomerate with diversified businesses across energy, engineering, and other asset-intensive, project-driven industries. Its scale, multi-business structure, and portfolio of major projects make risk management central to how it grows and protects value.

The role

Own risk for the entire Group. You will build and run the enterprise risk framework, challenge the business when it matters, and be the senior risk voice in front of the Board and the executive team.

This is a business-facing role in an asset-intensive, project-driven group. You will sit next to the projects, contracts, and operations where the real risk lives, and help leaders balance growth, resilience, and performance.

What you will own

• Enterprise risk: the Group's ERM framework, risk appetite, tolerances, and escalation protocols. You set the standard and hold the line.
• Project risk: governance and independent challenge on major, high-risk projects, from tendering through execution to close-out. Cost, schedule, contract, supply chain, HSE, and quality.
• Business continuity: Group lead for BCM and organisational resilience. Plans that are tested, drilled, and updated, not filed away.
• Insurance and risk transfer: strategic oversight of the Group's insurance programme and how it fits the risk profile.
• Third-party, KYC, and sanctions risk: independent assessment of escalated red flags, with go/no-go calls within delegated authority and escalation to the executive team when needed.
• Risk reporting and insight: KRIs, dashboards, and early-warning signals that give the Board and ELT a forward-looking view, not a rear-view mirror.
• Strategic advisory: a risk lens on investments, acquisitions, tenders, and big commercial decisions.
• Your team and culture: build a high-performing risk team and make risk-aware decision-making part of how the Group works.

What you bring

• 15+ years in enterprise, operational, project, or commercial risk, business continuity, or insurance and risk transfer, including 5+ years leading a function.
• Deep experience in energy, oil and gas, engineering, construction, manufacturing, chemicals, or another asset-intensive, project-driven industry, ideally across multiple businesses.
• A proven record of building ERM frameworks, governance, and risk-appetite structures from the ground up.
• Real hands-on exposure to major projects, contracts, supply chains, and business interruption.
• The presence to challenge CEOs, C-suite leaders, and Board Committees, constructively and independently.
• Strong analytics and reporting skills, with the ability to turn complex risk data into clear recommendations.
• A bachelor's degree in risk management, business, engineering, finance, economics, or similar. CRMP, IRM, PMP, or CBCI is an advantage.
• Oversight of third-party, vendor, KYC, or sanctions risk.
• Experience in a complex multi-business or multinational group.

How you operate

• Business-facing and commercially minded. You partner with project directors and business leaders, not just review them.
• Independent, with sound judgement and the integrity to say no.
• Calm and decisive in a fast-paced, project-driven, operationally complex environment.
• A builder and coach who develops people and leaves the function stronger.

Why this role

• A seat at the table with the Board, Board Committees, and the executive team.
• Broad mandate: ERM, project risk, BCM, insurance, third-party risk, and strategy in one role.
• The chance to move risk from a compliance exercise to a core part of how the Group makes decisions.