Senior Executive, Risk Management

GD Express; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

GDEX seeks a Senior Executive, Risk Management to join the Risk Management, Compliance & Quality Assurance Department. You will support the risk framework across the group, identify and monitor risks, and prepare reports for management decision-making.

You will assist in maintaining the risk register, conduct risk assessments, monitor KRIs, and escalate high-risk issues promptly while coordinating with compliance, QA, and internal audit teams.

Qualifications

• Bachelor’s degree in risk management, finance or related field.
• 3–5 years’ experience in risk management, internal audit or analytics.
• Familiar with risk assessment, risk registers and risk reporting.
• Knowledge of ISO 31000 and ISO management system standards.
• Strong analytical and stakeholder engagement skills.

Responsibilities

• Support implementation and monitoring of the risk management framework across group entities.
• Identify, assess and monitor business risks and escalate significant concerns.
• Maintain risk registers, KRIs and treatment progress with risk owners.
• Prepare risk reports and dashboards for ARMC review.
• Coordinate with Compliance, QA and Internal Audit to avoid duplication.
• Review continuity and crisis-related risks and update the risk framework.

Skills

Risk management

ISO 31000

Analytical skills

Stakeholder engagement

Communication skills

ERM frameworks

Education

Bachelor's Degree in Risk Management, Finance, Business Administration or a related field

Tools

ISO management systems

Job description

About the Role
We are looking for a Senior Executive, Risk Management to join our Risk Management, Compliance & Quality Assurance Department. In this role, you will support the implementation and monitoring of the Group's risk management framework by identifying, assessing and monitoring business risks across the GDEX Group. You will work closely with different departments and business entities to ensure risks are properly managed, mitigation plans are monitored, and risk reports are prepared to support management decision-making.

Support the Manager in maintaining the Group risk register, ensuring risks across entities are logged, rated, and owned consistently.

Conduct or facilitate risk assessment sessions with entity management to identify new or evolving risks.

Apply the Group's risk assessment methodology consistently across GDEX Group of companies.

Assist in evaluating the design and adequacy of risk treatment/mitigation plans proposed by risk owners.

Maintain awareness of emerging risk categories relevant to the Group and flag these to the Manager for inclusion in the risk framework.

Track key risk indicators (KRIs) and treatment plan progress across entities, following up with risk owners on outstanding items.

Prepare risk reports, dashboards, and supporting analysis for the Manager's review ahead of ARMC reporting.

Coordinate with Compliance & Quality Assurance colleagues and Internal Audit contacts to avoid duplicated risk coverage.

Review and monitor business continuity and crisis-related risks as part of the risk management process and escalat[e] significant concerns to the Manager where appropriate.

Promptly escalat[e] significant, high-risk, overdue, recurring, or time-sensitive risk matters to the Manager for review and appropriate action.

Compliance & Safety

To comply with the Company's Environmental Management System (EMS), including applicable environmental policies, procedures, operational controls, and legal and regulatory requirements.

To support pollution prevention and the Company's sustainability objectives by adhering to established environmental controls and adopting good environmental practices.

To comply with the company’s IT Policy & Procedures, ensuring adequate protection of confidential data, secure information handling and prevention of unauthorised access and prevention of unauthorized access.

To comply with the Company's Anti-Bribery Management System (ABMS), including applicable anti-bribery policies, procedures, and controls, and to perform duties with integrity in accordance with the Company's anti-bribery requirements.

Stakeholder Support & Documentation

Build working relationships with risk owners across entities to support their engagement with the risk management process.

Maintain accurate, audit-ready documentation of risk assessments, registers, and treatment plans.

Assist the Manager in preparing risk-related materials for the ARMC and senior management.

Liaise with external parties (e.g., insurers, risk consultants) as directed by the Manager.

Support periodic review and refinement of the Group's risk management framework and templates.

Support the integration of risk management practices into ISO management systems, internal controls, anti-bribery governance, management review processes, and continual improvement initiatives.

Requirements & Qualifications

Bachelor's Degree in Risk Management, Finance, Business Administration or a related field.

Minimum 3–5 years of working experience in Risk Management, Internal Audit or a related analytical or advisory role.

Working knowledge of risk management methodologies, such as ISO 31000, and ISO management system standards.

Familiarity with risk assessment, risk registers, risk mitigation plans and risk reporting.

Strong analytical skills with the ability to identify potential business risks and recommend appropriate mitigation measures.

Good communication and interpersonal skills, with the ability to engage and coordinate with stakeholders across different business units.

Experience with Enterprise Risk Management (ERM) frameworks will be an advantage. Candidates willing to learn and develop expertise in the Group's risk management methodology are also encouraged to apply.

Supported by robust technology infrastructure and digital platforms, GDEX offers express courier service, international shipping, and warehouse fulfilment. GDEX has recently diversified into IT services and solutions.

Established in 1997, GDEX is a homegrown company that has expanded regionally to Singapore, Indonesia, and Vietnam. Today, GDEX includes smart retail solutions (Xilnex), ecommerce & app development (Sweetmag), and cybersecurity solutions (Anon Security).

With this ecosystem, GDEX provides digital business solutions, leveraging our comprehensive logistics network to serve businesses and communities. We do not just deliver shipments, but also mobilise businesses across the region

Supported by robust technology infrastructure and digital platforms, GDEX offers express courier service, international shipping, and warehouse fulfilment. GDEX has recently diversified into IT services and solutions.

Established in 1997, GDEX is a homegrown company that has expanded regionally to Singapore, Indonesia, and Vietnam. Today, GDEX includes smart retail solutions (Xilnex), ecommerce & app development (Sweetmag), and cybersecurity solutions (Anon Security).

With this ecosystem, GDEX provides digital business solutions, leveraging our comprehensive logistics network to serve businesses and communities. We do not just deliver shipments, but also mobilise businesses across the region