Senior Manager - Risk - Compliance

Hartalega; Selangor; On-site; MYR 120,000 - 180,000; Full time

Job summary

Jora Malaysia is seeking a senior risk professional to lead and enhance the enterprise risk management framework, including appetite statements and targets aligned to company goals. You will establish processes for risk identification, assessment, monitoring, and reporting, develop KRIs, and drive a strong BCM program across the organisation.

The role requires deep ERM knowledge and a commitment to risk-aware culture.

Qualifications

• Bachelor degree in risk management, accounting, finance, law, or related field.
• Professional Risk Management certification is an added advantage.
• Minimum 8 years of relevant risk management experience.
• Understanding of ERM and BCM fundamentals.
• Knowledge of ISO 31000 and ISO 22301.

Responsibilities

• Develop, review, and update the enterprise risk management framework, including risk appetite statements and risk targets, to support organisational objectives.
• Establish, implement, and maintain structured processes for risk identification, assessment, monitoring, and reporting across the organisation.
• Implement risk management initiatives, including risk facilitation sessions and advisory activities, to support effective risk ownership and mitigation.
• Develop and implement risk management tools, processes, and KRIs to monitor changes in risk exposure and impact.
• Review risk reports submitted by risk owners and provide guidance on design and enhancement of risk management and mitigation programmes.
• Perform timely reviews and audits of risk mitigation controls to ensure adequacy, effectiveness, and ongoing monitoring of risk treatment actions.
• Establish and document formal risk reporting and escalation structures to ensure clear communication of key risks to management and governance bodies.
• Build and embed a strong risk awareness culture through training, knowledge sharing, and facilitation activities.
• Organise and facilitate half-yearly risk reviews with the Risk Management Working Group and Risk Management Committee, including preparation of reports and materials.
• Develop, maintain, and oversee the BCM framework, policies, and procedures, including coordinating business continuity testing, annual plan reviews, BIA, and preparation of risk bulletins or newsletters.

Skills

Risk management

ERM fundamentals

BCM knowledge

ISO 31000

ISO 22301

Education

Bachelor degree in risk management or related field

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

• Develop, review, and update the enterprise risk management framework, including risk appetite statements and risk targets, to support organisational objectives.
• Establish, implement, and maintain structured processes for risk identification, assessment, monitoring, and reporting across the organisation.
• Implement risk management initiatives, including risk facilitation sessions and advisory activities, to support effective risk ownership and mitigation.
• Develop and implement risk management tools, processes, and key risk indicators (KRIs) to monitor changes in risk exposure and impact.
• Review risk reports submitted by risk owners and provide guidance on the design and enhancement of risk management and mitigation programmes.
• Perform timely reviews and audits of risk mitigation controls to ensure adequacy, effectiveness, and ongoing monitoring of risk treatment actions.
• Establish and document formal risk reporting and escalation structures to ensure clear communication of key risks to management and governance bodies.
• Build and embed a strong risk awareness culture by developing and driving risk awareness programmes, training sessions, knowledge sharing, and facilitation activities.
• Organise and facilitate half-yearly risk reviews with the Risk Management Working Group and Risk Management Committee, including preparation of relevant reports and materials.
• Develop, maintain, and oversee the Business Continuity Management (BCM) framework, policies, and procedures, including coordinating business continuity testing, annual plan reviews, Business Impact Analysis (BIA), and preparation of risk bulletins or newsletters, as well as performing other related tasks as assigned.

REQUIREMENTS

• Bachelor Degree in risk management or Accountancy or Finance or Law or related Business Administration field.
• Professional Risk Management certification is an added advantage.
• Minimum 8 years of relevant working experience in risk management or similar capacity.
• Understanding of risk management fundamentals (ERM & BCM).
• Knowledge of Enterprise Risk Management frameworks and methodologies (ISO 31000:2018 Risk Management – Principles and Guidelines & ISO 22301 Business Continuity Management System).