Job Description
The Chief Risk & Compliance Officer (CRCO) will lead the organisation's enterprise risk management and compliance functions, with a primary emphasis on proactive risk identification, mitigation, and data-driven decision making. This strategic leadership role reports directly to the CEO, CFO and Board of Directors, ensuring Macsteel maintains robust risk management frameworks while fostering a culture of risk awareness across all levels.
This position offers the opportunity to shape Macsteel’s risk management strategy and culture while leveraging cutting-edge data analytics to drive informed decision-making at the highest levels.
Required Qualifications
- Bachelor’s degree in risk management, Finance, Business Administration, or related field required
- Master's degree (MBA, MSc in Risk Management) an advantage
- Professional certifications such as FRM (Financial Risk Manager), PRM (Professional Risk Manager), CRISC (Certified in Risk and Information Systems Control), or similar highly desirable
Experience
- Minimum 10-12 years of progressive experience in risk management, with at least 5 years in senior leadership roles
- Proven track record of developing and implementing enterprise risk management frameworks
- Extensive experience in risk identification, assessment, and mitigation across multiple risk categories
- Demonstrated experience managing incidents and materialised risks, including crisis response
- Strong background in data analytics and risk reporting, with experience using analytics platforms and tools
- Experience reporting to Board of Directors and senior executive committees
- Technical Skills
- Advanced knowledge of enterprise risk management methodologies and frameworks (ISO standards, COSO ERM, etc.)
- Proficiency in data analytics tools and techniques (SQL, Python, R, Tableau, Power BI, or similar)
- Strong understanding of risk metrics, KRIs, and statistical analysis
- Experience with risk management information systems (RMIS) and GRC platforms
- Knowledge of relevant regulatory requirements and compliance frameworks
- Excellent understanding of business intelligence and data visualisation
Leadership And Soft Skills
- Exceptional strategic thinking and ability to translate risk insights into business strategies
- Strong executive presence with ability to influence and advise senior leadership and Board members
- Excellent communication skills with ability to present complex risk information clearly to diverse audiences
- Proven ability to build and lead high-performing teams
- Strong stakeholder management and relationship-building capabilities
- Analytical mindset with attention to detail and ability to see the broader organizational picture
- Change management expertise to drive cultural transformation around risk awareness
Key Competencies
- Strategic vision and business acumen, Data-driven decision making
- Problem-solving and critical thinking, Leadership and team development
- Influence and persuasion, Adaptability and resilienceEthical judgment and integrity, Collaboration and partnership building
Duties and Responsibilities
Risk Management Strategy & Leadership
- Develop and implement comprehensive enterprise risk management (ERM) strategies aligned with organisational objectives and risk appetite
- Design and maintain the organisation's risk management framework, policies, and procedures
- Lead the risk management function and build a high-performing team capable of addressing complex, evolving risks
- Collaborate with executive leadership to integrate risk considerations into strategic planning and business decisions
- Present regular risk reports and recommendations to the Board of Directors and executive committees
Risk Awareness & Culture
- Cultivate a strong risk awareness culture throughout Macsteel through training, communication, and leadership engagement
- Design and deliver risk management training programs for staff at all levels
- Establish, empower and partner with risk champions across business units to embed risk management into daily operations
- Develop communication strategies to ensure risk information reaches relevant stakeholders in a timely and actionable manner
- Foster collaboration between risk management and operational teams to ensure risks are understood and managed effectively
Risk Identification & Assessment
- Establish systematic processes for identifying emerging and existing risks across all business areas including strategic, operational, financial, regulatory, and reputational risks
- Conduct comprehensive risk assessments using qualitative and quantitative methodologies
- Implement horizon scanning and early warning systems to detect emerging risk trends
- Facilitate regular risk workshops and assessments with business units and senior leadership
- Maintain and update Macsteel’s risk register with clear ownership, impact assessments, and mitigation strategies
Incident Management & Response
- Develop and implement incident reporting frameworks to capture risk events when they materialise
- Lead incident response efforts, conducting root cause analysis and implementing corrective actions
- Track and monitor materialized risks, documenting lessons learned and adapting risk frameworks accordingly
- Establish escalation protocols for significant risk events requiring senior management or Board attention
- Coordinate with relevant departments during crisis situations to minimise impact and ensure business continuity
Data Analytics & Risk Intelligence
- Leverage advanced data analytics to identify risk patterns, trends, and correlations across the organization
- Implement risk metrics, key risk indicators (KRIs), and dashboards to provide real-time risk visibility
- Utilize predictive analytics and modelling to forecast potential risk scenarios and their impact
- Develop data-driven risk reporting that translates complex risk information into actionable insights for decision-makers
- Ensure data quality, integrity, and governance in all risk-related analytics and reporting
- Employ technology solutions including risk management information systems (RMIS) and analytics platforms
Reporting & Governance
- Establish comprehensive risk reporting frameworks that provide transparency to stakeholders at all levels
- Prepare regular risk reports for the Board, executive leadership, and regulatory bodies
- Track and report on the status of risk mitigation actions and their effectiveness
- Monitor changes in the risk profile and communicate material changes to relevant stakeholders
- Maintain documentation and audit trails for all risk management activities
Compliance Oversight
- Ensure Macsteel is compliant with relevant laws, regulations, and industry standards
- Develop and maintain compliance monitoring programs and internal controls
- Coordinate regulatory examinations and audits
- Stay current on regulatory developments and assess their impact on Macsteel
Success Metrics
- Effectiveness of risk management framework implementation and maturity
- Quality and timeliness of risk reporting and insights
- Reduction in number and severity of materialised risks over time
- Improvement in Macsteel’s risk awareness and culture metrics
- Stakeholder satisfaction (Board, executive leadership) with risk management function
- Accuracy of risk predictions and analytics
- Speed and effectiveness of incident response and resolution
- Compliance with regulatory requirements and audit findings