Senior Risk & Compliance Leader — ERM/BCM

Hartalega; Petaling Jaya; On-site; MYR 180,000 - 280,000; Full time

Job summary

Hartalega in Malaysia seeks a seasoned Risk Manager to lead enterprise risk management, BCM, and risk governance. You will develop, review, and maintain risk frameworks, KRIs, and reporting processes, ensuring effective mitigation and awareness across the organisation.

The role requires 8+ years of RM/ERM experience, familiarity with ISO 31000 and ISO 22301, and strong stakeholder engagement to drive risk-informed decisions.

Qualifications

• Bachelor Degree in risk management or Accountancy or Finance or Law or related Business Administration field.
• Professional Risk Management certification is an added advantage.
• Minimum 8 years of relevant working experience in risk management or similar capacity.
• Understanding of risk management fundamentals (ERM & BCM).
• Knowledge of ERM frameworks and ISO 31000/ISO 22301.

Responsibilities

• Develop, review, and update the enterprise risk management framework to support objectives.
• Establish and maintain processes for risk identification, assessment, monitoring, and reporting.
• Implement risk management initiatives and facilitation sessions to support mitigation.
• Develop and implement risk tools and KRIs to monitor risk exposure.
• Review risk reports and advise on design of mitigation programmes.
• Audit risk mitigation controls for adequacy and ongoing monitoring.
• Document formal risk reporting and escalation structures to management.
• Build risk awareness culture through training and knowledge sharing.
• Organise half-yearly risk reviews with governance bodies.
• Develop and oversee BCM framework, including BIA and testing.

Skills

ERM

Risk assessment

BCM

ISO 31000

ISO 22301

Stakeholder management

Risk reporting

Education

Bachelor Degree in risk management or Accountancy or Finance or Law or related Business Administration

Job description

Hartalega in Malaysia seeks a seasoned Risk Manager to lead enterprise risk management, BCM, and risk governance. You will develop, review, and maintain risk frameworks, KRIs, and reporting processes, ensuring effective mitigation and awareness across the organisation.

The role requires 8+ years of RM/ERM experience, familiarity with ISO 31000 and ISO 22301, and strong stakeholder engagement to drive risk-informed decisions.