Head of Risk and OHS

Ziyana Business Consulting and Training; Johannesburg; On-site; ZAR 900,000 - 1,700,000; Full time

Job summary

Ziyana Business Consulting and Training in Johannesburg seeks a Head of Risk and OHS to lead operational risk, BCM, and data privacy programs. You will drive ERMF adoption, guide functional heads, and monitor risk metrics and compliance across the client functions.

The role requires extensive risk management experience, regulatory knowledge, and strong leadership to align risk strategies with business objectives.

Qualifications

• B degree or equivalent in Audit/Business Management or Risk Management.
• Honours degree in Audit or Business Management preferred.
• Code B Driver’s License.
• Certificate in Executive Administration.
• Eight years’ experience in risk management and/or relevant business sector.
• Sound operational risk and compliance knowledge.
• Knowledge of main operational processes’ procedures and control frameworks.
• Understanding of emerging technologies and risk implications.
• Proficient in MS Office (Word, Excel, PowerPoint and Outlook).
• Awareness of cultural differences and varying regulatory environments.
• Experience implementing risk or compliance frameworks.
• Exposure to Operational Risk Governance and related Committees.
• Experience with Risk Framework elements especially Operational Risk management.
• Experience dealing with multiple and diverse stakeholders.
• Knowledge of risk environment and regulatory policies and best practices.
• Ability to operate independently.

Responsibilities

• Manage and promote the Enterprise Risk Management Framework (ERMF) and Operational Risk Oversight.
• Oversee BCM, Data and Records Management, and Data Privacy responsibilities.
• Provide leadership and guidance to functional heads on ERMF adherence.
• Monitor compliance, risk levels, and reporting to senior management.
• Collaborate with governance forums to improve risk management through digitisation and standardisation.
• Develop and implement risk reporting processes for the client management and committees.
• Support continuous improvement in risk processes and controls.
• Engage with Internal Audit, Compliance and Group Risk on risk governance.

Skills

Operational risk management

Governance & compliance

Leadership

Stakeholder management

Regulatory knowledge

Risk assessment

Data privacy awareness

Education

B degree or equivalent in Audit / Business Management / Risk Management

Honours degree in Audit or Business Management

Tools

Code B Driver’s License

MS Office

Job description

Ziyana Business Consulting and Training | Full time

Head of Risk and OHS

Johannesburg, South Africa | Posted on 10/11/2026

Our client in the Facilities Management is looking for a Head of Risk and OHS to join their diverse, performance driven team.

Scope of Work:

Accountability: Operational Risk ManagementOversight

• Ensure optimal positioning of the Enterprise RiskManagement Framework (ERMF) and ORRMF within THE CLIENT by creating awarenessand understanding of operational risk among senior management;
  
• Ensure effective implementation, representation andadoption of the ERMF, by all the client functions;
  
• Monitor functional performance against risk appetite;
  
• Check and challenge the end-to-end Operational Risk profileof the function, including emerging risks, to ensure ‘no surprises. Considerall framework elements, strategic planning, business expansions/contractionsand other major change programmes / new product approval
  
• Identify all Group related policies and standards andensure that the processes align to minimum control guidance as set out inpolicies and standards;
  
• Oversee and facilitate the design of appropriate processesand procedures needed to implement the ERMF in THE CLIENT including ensuringsub- functions implement appropriate, standardised and adequate risk andcompliance processes and monitoring capability;
  
• Develop, draft and communicate relevant guidance documentsto ensure compliance with ORRMF policies and standards;
  
• Be the ‘Go To’ person and provide guidance to THE CLIENTFunctional Heads and managers on the interpretation of the ERMF and relatedpolicies and standards
  
• Monitor and challenge the effectiveness and adherence tothe ERMF and ORRMF;
  
• Assess the level of compliance and risk in THE CLIENT andreport this to senior management;
  
• Assess the compliance to policies and standards and applyfor dispensation and/ or waiver to the relevant RTO where material gaps inpolicies/standards or sections of policies/standards are identified, orconsidered irrelevant post the risk appetite setting for the client function;
  
• Assist in the design and implementation of the minimumOperational Risk Key Indicators (KI) for THE CLIENT as required by the RTOincluding assessing the relevance and performance against thresholds;
  
• Seek opportunities for continuous improvement in processesfor efficiency and effectiveness in execution of risk management activities;
  
• Monitor overdue Internal Audit findings that pertain to theclient and ensure these are addressed timeously through engagement withresponsible persons;
  
• Oversee monthly loss event reconciliation and relatedattestations to ensure that all (above threshold) risk events and losses havebeen captured on the Operational Risk system;
  
• Provide relevant coaching and guidance to the sub-functionson the implementation and maintenance of the Operational Risk frameworkcomponents (including RCSAs, KRIs, Events, Strategic Risk Assessments, and KeyRisk Scenarios, etc.) in consultation with 2LOD;
  
• Remain abreast of the ORRMF, policies, standards,procedures, and relevant legislation/regulations
  

Accountability: Business Continuity Management(BCM)

• Accountability and management of BCM for the client ;
  
• Review of the client BCM plans and oversight of thesub-functional plans, on relevant reporting tools and formats, to ensurecompliance with BCM Policies and Standards;
  
• Exercise preparedness, recovery capability and competenceby BCM test requirements as per the BCM policy;
  
• Where relevant, follow up with management to ensure timelyremediation of control and process failures;
  
• Ensure appointment of relevant functional representativesper BCM requirements;
  
• Ensure relevant training and guidance documents areavailable, attended and completed by functional representatives per BCMrequirements;
  
• Report to the client management on BCM readiness;
  
• Attend all BCM related forums and ensure full alignment ofthe client BCM plans;
  
• Act as the central point of contact between the client andthe BCM office;
  
• Act as central point of contact in the event of BCMinvocation.
  

Accountability: Data and Records Management andData Privacy:

• Accountability and management of Data and RecordsManagement and Data Privacy for the client as per Group Policies and Standards.
  
• Maintenance of relevant templates on relevant reportingtools and formats, to ensure compliance with DRM and Data DP Policies andStandards.
  
• Where relevant, follow up with management to ensure timelyresolution of areas of non-compliance.
  
• Assist with the remediation of control and processfailures.
  
• Reporting to the client management on DRM and DPcompliance.
  
• Attend all DRM and Data Privacy-related forums and ensurefull alignment of DRM and DP processes as required.
  
• Provide feedback to the client management on DRM andDP-related matters.
  
• Act as the central point of contact between the client andthe Data Privacy Office.
  
• Design and implement regular risk reporting processes whichcan be used for complete reporting requirements to THE CLIENT management,governance forums, and committees;
  
• Responsible for collating all relevant information toensure accurate, timely, complete reporting of Operational risks for the client;
  
• Report to senior management on the aggregate of the clientrisk profile.
  
• Validate data and information in relevant reports providedby 1LOD teams in the client Function, as appropriate
  
• Provide independent challenge on, and insight,interpretation, and analytics from relevant reports to senior management.
  
• Prepare appropriate current and forecast Operational Riskprofile reporting for the for the function, as agreed.
  

Accountability:Leadership and Stakeholder Management

• Provide strong leadership, direction and display role modelbehaviours, inspiring others to work together to achieve the strategic vision.
  
• Establish and maintain effective working relationships withall key stakeholders such as:
  
• Group Risk, Risk Type Owners and Chief Risk Officers;
  
• The client management.
  
• Functional heads.
  
• Internal Audit and Compliance.
  
• Lead the organisation to improve risk management throughdigitization, automation, standardisation and simplification.
  
• Drive and participate in forums that positively contributeto functional knowledge improvement
  
• Understand stakeholders' expectations and ensure that stakeholders'expectations are met and exceeded in certain instances.
  
• Foster a strategic relationship with Management Assurance,Group Compliance, Operational Risk and The Client Internal Audit to ensurealignment in terms of current risks and the impact thereof on the risk profileof the function;
  
• Ensure integration of the ERMF into related activities withan objective to ensure a strong control environment and continuous improvementwithin Functions;
  
• Interact with Functional Risk representatives to facilitateRisk assessments as well as providing guidance to mitigate risks outside theset risk appetite.
  
• Ensure Risk representatives are fully aware of theirresponsibilities and that they execute accordingly;
  
• Establish and maintain relevant governance forums toproactively manage risk management within the client.
  

Requirements

• B degree or equivalent specializing in Audit / BusinessManagement/ Risk Management or equivalent NQF level 6 qualification or higher.
  
• Honours Degree in Audit or Business Management orequivalent NQF level 7 qualification (preferred)
  
• Code B Driver’s License
  
• Certificate in Executive Administration
  
• Eight (8) years’ experience in risk management and/orrelevant business sector.
  
• Sound operational risk and compliance knowledge.
  
• Knowledge of the main operational processes’ procedures andcontrol frameworks within the Client businesses.
  
• Understanding of emerging technologies and the riskimplications.
  
• Proficient in MS Office (Word, Excel, PowerPoint andOutlook) and the internet.
  
• Awareness of cultural differences and varyinglegal/regulatory environments.
  
• Experience in implementing risk or compliance frameworksend to end.
  
• Exposure to Operational Risk Governance and OperationalRisk and Control Committees
  
• Experience with Risk Framework elements especiallyOperational Risk management
  
• Experience in dealing with multiple and diversestakeholders
  
• No criminal record Knowledge of Risk Management, whichincludes risk identification, control design, monitoring, and reporting
  
• Knowledge of Banking Legislation
  
• Knowledge of the risk environment and Operational Riskmanagement
  
• Knowledge of risk regulation and industry standards
  
• Strong operational risk and general compliance knowledge
  
• Knowledge of compliance and regulatory policies and bestpractice
  
• Ability to operate independently of detailed linesupervision