Senior Risk Manager

PTY; Johannesburg; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

Red Ember Recruitment (PTY) Ltd in Johannesburg seeks a Senior Risk Manager to lead enterprise-wide risk within the Division under the ERM framework. You will identify, assess, monitor, and mitigate strategic and operational risks to protect assets and ensure business continuity.

Responsibilities include maintaining risk registers, dashboards, combined assurance, and remediation tracking, as well as coordinating with Group Risk Management. Strong analytical and leadership skills are essential.

Qualifications

• Minimum two years’ post-qualifying experience in audit, risk, or governance.
• Proven ability to lead enterprise risk management initiatives.
• Strong data analysis, reporting, and presentation skills.
• Familiarity with risk frameworks (ISO 31000, COSO).
• Retail/FMCG experience preferred.

Responsibilities

• Maintain divisional ERM risk register and track risk scoring.
• Develop risk dashboards and monthly executive reporting.
• Coordinate combined assurance and CAPA remediation.
• Oversee store audits, loss prevention, and compliance.
• Lead regional risk team and monitor outputs.

Skills

ERM

Risk governance

Internal Audit

People management

Communication skills

Tools

Excel

ERP

Job description

Red Ember Recruitment (PTY) Ltd | Permanent

Johannesburg, South Africa | Posted on 16/10/2026

Red ember recruitment is seeking to appoint a Senior Risk Manager for their client in Johannesburg. Suitably qualified and experiencedindividual who will be responsible for managing enterprise-wide risks withinthe Division through the effective implementation of the Group's EnterpriseRisk Management (ERM) framework. The role will identify, assess, monitor, andmitigate strategic, operational, financial, compliance, and emerging risks toprotect assets, enhance resilience, support informed decision-making, andensure business continuity. The role will also coordinate combined assuranceand track the remediation of assurance findings across the Division.

1. Risk Assessment & Strategic Outputs

• Divisional Enterprise RiskRegister: Maintain a divisional risk register that assesses, scores and tracks risksacross Destination Retail division. Updated regularly as the organisationand trading environment evolves.
• Risk Appetite Statements(RAS): Develop and agree thresholds definingacceptable margins of risk per risk category in line with the Group’sapproved appetite.
• Business Continuity & Disaster RecoveryPlans: Ensure that there are structured protocols tohandle proactive planning that keeps the overall business operating duringunfavorable conditions, covering staff safety, alternative workspaces, supplychains, IT, customer, staff and supplier communication.
• Monitor the implementation and effectiveness ofrisk mitigation actions.
• Develop risk dashboards to monitor performanceagainst approved risk thresholds. Dashboards to include monthly executivereporting on key risks, audit findings and KPIs (e.g. shrinkage vs. target).
• Report significant risk exposures to DestinationRetail governance forums and management committees.
• Liaise with Group Risk Management on riskgovernance, reporting, and ERM-related matters.

2. Combined Assurance

• Monitor and track assurance findings to ensuretimely remediation and closure by accountable management. This includesmaintaining corrective action plans (CAPA) assigned to specific stores ordepartments, with clear accountabilities.
• Review Control Self-Assessment (CSA) and FinancialDirector Review (FDR) outcomes to verify that identified control gaps have beeneffectively addressed.
• Support the development and maintenance of combinedassurance maps, identifying assurance gaps, overlaps, and coveragerequirements.
• Provide consolidated combined assurance reportingto Group Risk Management in line with agreed reporting requirements andtimelines.

3.Operational & AuditDocumentation

• Store Audit Checklists &Compliance Frameworks: Standardised, highly structured criteria for regional and storemanagers to evaluate daily physical safety, cash handling, inventory andasset control.
• Shrinkage & Stock-LossMitigation Protocols: Standard operating procedures (SOPs) explicitly targetinginventory discrepancies, damages, and administrative errors.
• Policies and Process flows: Assist with the annual review of thefinancial/operational process policies and process flows in line withinternal/external audit requirements
• Vendor & Supplier Risk Assessments:Evaluative: Establish a structured process to identify,evaluate, and prioritize the threats third-party providers introduce to theorganization.

4. Investigative & Performance Reports

• Incident InvestigationReports: Establish a standardised incident report to track and monitor deviationsfrom standards and mitigating controls implemented

5. Security & Compliance Controls

• Physical Security & LossPrevention Frameworks: Review mandates for store layouts, drop-safe requirements, ATMsecurity, and the integration of CCTV and security guard deployments.
• Regulatory & DataPrivacy Frameworks: Review directives ensuring store operations and software strictlyabide by local data laws (such as POPIA) and consumer protection acts.
• Staff Training &Awareness Modules: Review training materials designed to educate cashiers and floorstaff on recognizing fraud, preventing syndicated shoplifting, andreporting cyber threats.

6. Management of the Regional risk team

Monthly monitoring and reviewing of the regionalrisk team’s outputs

• Consolidated reporting of the regional risk teamresults for Shrinkage, stock losses etc

Requirements

• Deadline Driven
• High attention to detail
• Accuracy
• Planning ability
• Team player with strongpeople management skills
• Good communicationskills
• Excellent presentationskills

Qualifications and Skills

The following are non-negotiable

• At least two years’ postqualifying experience within audit/risk
• Proven experience inEnterprise Risk Management, Risk Assurance, or Internal Audit with astrong focus on risk management and governance
• Excellent computer literacy,ERP and Excel is a pre-requisite.
• Ideally a candidate withretail/FMCG experience.
• Knowledge of Risk ManagementFrameworks (e.g. ISO 31000, COSO etc.)