Red Ember Recruitment (PTY) Ltd | Permanent
Johannesburg, South Africa | Posted on 16/10/2026
Red ember recruitment is seeking to appoint a Senior Risk Manager for their client in Johannesburg. Suitably qualified and experiencedindividual who will be responsible for managing enterprise-wide risks withinthe Division through the effective implementation of the Group's EnterpriseRisk Management (ERM) framework. The role will identify, assess, monitor, andmitigate strategic, operational, financial, compliance, and emerging risks toprotect assets, enhance resilience, support informed decision-making, andensure business continuity. The role will also coordinate combined assuranceand track the remediation of assurance findings across the Division.
1. Risk Assessment & Strategic Outputs
- Divisional Enterprise RiskRegister: Maintain a divisional risk register that assesses, scores and tracks risksacross Destination Retail division. Updated regularly as the organisationand trading environment evolves.
- Risk Appetite Statements(RAS): Develop and agree thresholds definingacceptable margins of risk per risk category in line with the Group’sapproved appetite.
- Business Continuity & Disaster RecoveryPlans: Ensure that there are structured protocols tohandle proactive planning that keeps the overall business operating duringunfavorable conditions, covering staff safety, alternative workspaces, supplychains, IT, customer, staff and supplier communication.
- Monitor the implementation and effectiveness ofrisk mitigation actions.
- Develop risk dashboards to monitor performanceagainst approved risk thresholds. Dashboards to include monthly executivereporting on key risks, audit findings and KPIs (e.g. shrinkage vs. target).
- Report significant risk exposures to DestinationRetail governance forums and management committees.
- Liaise with Group Risk Management on riskgovernance, reporting, and ERM-related matters.
2. Combined Assurance
- Monitor and track assurance findings to ensuretimely remediation and closure by accountable management. This includesmaintaining corrective action plans (CAPA) assigned to specific stores ordepartments, with clear accountabilities.
- Review Control Self-Assessment (CSA) and FinancialDirector Review (FDR) outcomes to verify that identified control gaps have beeneffectively addressed.
- Support the development and maintenance of combinedassurance maps, identifying assurance gaps, overlaps, and coveragerequirements.
- Provide consolidated combined assurance reportingto Group Risk Management in line with agreed reporting requirements andtimelines.
3.Operational & AuditDocumentation
- Store Audit Checklists &Compliance Frameworks: Standardised, highly structured criteria for regional and storemanagers to evaluate daily physical safety, cash handling, inventory andasset control.
- Shrinkage & Stock-LossMitigation Protocols: Standard operating procedures (SOPs) explicitly targetinginventory discrepancies, damages, and administrative errors.
- Policies and Process flows: Assist with the annual review of thefinancial/operational process policies and process flows in line withinternal/external audit requirements
- Vendor & Supplier Risk Assessments:Evaluative: Establish a structured process to identify,evaluate, and prioritize the threats third-party providers introduce to theorganization.
4. Investigative & Performance Reports
- Incident InvestigationReports: Establish a standardised incident report to track and monitor deviationsfrom standards and mitigating controls implemented
5. Security & Compliance Controls
- Physical Security & LossPrevention Frameworks: Review mandates for store layouts, drop-safe requirements, ATMsecurity, and the integration of CCTV and security guard deployments.
- Regulatory & DataPrivacy Frameworks: Review directives ensuring store operations and software strictlyabide by local data laws (such as POPIA) and consumer protection acts.
- Staff Training &Awareness Modules: Review training materials designed to educate cashiers and floorstaff on recognizing fraud, preventing syndicated shoplifting, andreporting cyber threats.
6. Management of the Regional risk team
Monthly monitoring and reviewing of the regionalrisk team’s outputs
- Consolidated reporting of the regional risk teamresults for Shrinkage, stock losses etc
Requirements
- Deadline Driven
- High attention to detail
- Accuracy
- Planning ability
- Team player with strongpeople management skills
- Good communicationskills
- Excellent presentationskills
Qualifications and Skills
The following are non-negotiable
- At least two years’ postqualifying experience within audit/risk
- Proven experience inEnterprise Risk Management, Risk Assurance, or Internal Audit with astrong focus on risk management and governance
- Excellent computer literacy,ERP and Excel is a pre-requisite.
- Ideally a candidate withretail/FMCG experience.
- Knowledge of Risk ManagementFrameworks (e.g. ISO 31000, COSO etc.)