Senior Manager - Risk & Compliance

Hartalega; Petaling Jaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

Hartalega seeks a senior risk management professional to lead the enterprise risk management framework, risk appetite statements, and risk targets aligned with strategic objectives.

You will establish robust processes for risk identification, assessment, monitoring, and reporting, develop KRIs, and oversee BCM programs, testing, and risk communications.

Qualifications

• Bachelor degree in risk management, finance, or related field.
• Professional Risk Management certification is an added advantage.
• Minimum 8 years of relevant working experience in risk management.
• Strong understanding of ERM and BCM fundamentals.
• Knowledge of ISO 31000 and ISO 22301 frameworks.

Responsibilities

• Develop, review, and update the enterprise risk management framework.
• Establish, implement, and maintain structured processes for risk identification, assessment, monitoring, and reporting.
• Implement risk management initiatives and advisory activities to support risk ownership.
• Develop and implement risk management tools, KRIs to monitor risk exposure.
• Review risk reports and guide enhancement of mitigation programmes.
• Perform timely reviews of risk mitigation controls.
• Establish formal risk reporting and escalation structures.
• Build risk awareness culture through training and facilitation activities.
• Organise half-yearly risk reviews with the RM Working Group and Committee.
• Develop, maintain, and oversee the BCM framework, testing, and risk communications.

Skills

ERM knowledge

BCM knowledge

Risk assessment

Governance & compliance

Education

Bachelor Degree in risk management or Accountancy or Finance or Law or related Business Administration field

Tools

ISO 31000

ISO 22301

Job description

• Develop, review, and update the enterprise risk management framework, including risk appetite statements and risk targets, to support organisational objectives.
• Establish, implement, and maintain structured processes for risk identification, assessment, monitoring, and reporting across the organisation.
• Implement risk management initiatives, including risk facilitation sessions and advisory activities, to support effective risk ownership and mitigation.
• Develop and implement risk management tools, processes, and key risk indicators (KRIs) to monitor changes in risk exposure and impact.
• Review risk reports submitted by risk owners and provide guidance on the design and enhancement of risk management and mitigation programmes.
• Perform timely reviews and audits of risk mitigation controls to ensure adequacy, effectiveness, and ongoing monitoring of risk treatment actions.
• Establish and document formal risk reporting and escalation structures to ensure clear communication of key risks to management and governance bodies.
• Build and embed a strong risk awareness culture by developing and driving risk awareness programmes, training sessions, knowledge sharing, and facilitation activities.
• Organise and facilitate half-yearly risk reviews with the Risk Management Working Group and Risk Management Committee, including preparation of relevant reports and materials.
• Develop, maintain, and oversee the Business Continuity Management (BCM) framework, policies, and procedures, including coordinating business continuity testing, annual plan reviews, Business Impact Analysis (BIA), and preparation of risk bulletins or newsletters, as well as performing other related tasks as assigned.

REQUIREMENTS

• Bachelor Degree in risk management or Accountancy or Finance or Law or related Business Administration field.
• Professional Risk Management certification is an added advantage.
• Minimum 8 years of relevant working experience in risk management or similar capacity.
• Understanding of risk management fundamentals (ERM & BCM).
• Knowledge of Enterprise Risk Management frameworks and methodologies (ISO 31000:2018 Risk Management – Principles and Guidelines & ISO 22301 Business Continuity Management System).