Head, Enterprise Risk & Audit

Positivity ®; Singapore; On-site; SGD 180,000 - 250,000; Full time

Job summary

Positivity is seeking a Head of Enterprise Risk & Audit to lead regional risk management and internal audit across Singapore operations. The role requires collaborating with regional and global stakeholders to align governance with business objectives and enhance controls for regulatory compliance.

The successful candidate will drive risk-informed decision making, foster a risk-aware culture, and oversee audits, assurance activities, and remediation actions across the region, with emphasis on

Qualifications

• Minimum 10 years of senior leadership experience in Risk Management and/or Internal Audit, regional exposure.
• A proven track record in developing risk management frameworks and strengthening internal controls.
• Strong understanding of regional regulators, governance standards, and audit best practices.
• Leadership experience across cross-functional teams and stakeholder engagement.
• Excellent communication and analytical skills; relevant certifications are desirable.

Responsibilities

• Develop and execute an integrated risk management strategy providing regional oversight of operational, regulatory, financial, and strategic risks.
• Identify, assess, and monitor key risks across the region with data analysis, scenario planning, and stakeholder engagement.
• Promote a risk-aware culture by embedding accountability and providing guidance and training.
• Maintain oversight of the evolving regulatory landscape across jurisdictions and update policies accordingly.
• Represent the region in risk-related reviews, audits, and regulatory engagements.
• Identify opportunities to improve efficiency and reduce costs across risk management activities.
• Ensure compliance with data protection regulations such as PDPA and GDPR, including data governance and incident response.
• Design and implement effective internal control frameworks to ensure regulatory compliance and protect assets.
• Lead and coordinate internal audit activities across the region with independence and adherence to standards.
• Streamline audit and compliance processes and strengthen governance through integrated assurance.

Skills

Leadership

Strategic thinking

Risk management

Internal audit

Regulatory knowledge

Stakeholder engagement

Communication

Education

Bachelor’s degree in Engineering/Finance/Business

Master’s degree or MBA preferred

Job description

The Head, Enterprise Risk & Audit is responsible for overseeing and strengthening Risk Management & Internal Audit across regional operations. This senior leadership role ensures operational excellence, regulatory compliance, and effective risk mitigation at a regional level.

The role focuses on driving process optimization, enhancing internal control frameworks, and fostering a strong risk-aware culture across the organisation. It requires close collaboration with regional leadership teams and global stakeholders to ensure alignment with organisational objectives while addressing region-specific challenges and regulatory requirements.

PRIMARY DUTIES AND RESPONSIBILITIES

• Develop and execute an integrated risk management strategy providing regional oversight of operational, regulatory, financial, and strategic risks. Ensure alignment with global risk governance standards and embed risk awareness into day-to-day decision-making processes.
• Identify, assess, and monitor key risks across the region, enabling timely escalation and mitigation. Drive forward-looking risk intelligence through data analysis, scenario planning, and stakeholder engagement to support proactive decision-making and business continuity.
• Promote a risk-aware culture by embedding accountability at all levels of the organisation. Provide guidance, tools, and training to enable leaders and teams to manage risk effectively.
• Maintain close oversight of the evolving regulatory landscape across jurisdictions. Ensure timely updates to policies and procedures in line with legal requirements and corporate standards. Represent the region in risk-related reviews, audits, and regulatory engagements.
• Identify opportunities to improve efficiency and reduce costs across risk management activities. Ensure risk management is value-adding, data-driven, and aligned with broader business objectives.
• Ensure compliance with applicable data protection regulations such as PDPA and GDPR. Oversee data governance, privacy impact assessments, policy development, staff training, incident response, and engagement with regulators and data subjects.

2. Internal Audit

• Design and implement effective internal control frameworks to ensure regulatory compliance, safeguard organisational assets, and reduce exposure to risk.
• Lead and coordinate internal audit activities across the region, ensuring audits are conducted effectively, independently, and in accordance with internal audit standards.
• Streamline audit and compliance processes to eliminate inefficiencies and enhance consistency across the organisation.
• Leverage integrated assurance processes such as internal audits, risk assessments, compliance reviews, and certification management (e.g., ISO 27001 where applicable) to strengthen governance and control environments.
• Collaborate with internal audit and compliance teams to identify gaps, assess control effectiveness, and drive remediation actions.
• Ensure timely closure of audit findings and monitor implementation of corrective and preventive actions.
• Provide independent assurance to senior management and support audit committee reporting as required.

JOB REQUIREMENTS

• Bachelor’s degree in Engineering, Finance, Risk Management, Business, or a related field; Master’s degree or MBA preferred.
• Minimum 10 years of experience in senior leadership roles within Risk Management and/or Internal Audit, including regional exposure.
• Proven track record in developing and executing risk management frameworks, strengthening internal controls, and ensuring regulatory compliance.
• Strong knowledge of regional regulatory frameworks, governance standards, and internal audit best practices.
• Demonstrated leadership experience in managing cross-functional teams, driving cultural change, and influencing stakeholders.
• Excellent communication, presentation, and analytical skills, with strong problem-solving capabilities.
• Relevant certifications are highly desirable (e.g., CPA, CIA, CISA, CRMA, or ISO-related certifications).
• Flexibility to work beyond regular hours when required.