• Lead the identification, assessment and monitoring of operational and information technology risks across business processes, applications, infrastructure, projects and strategic initiatives. • Ensure material risks are evaluated consistently and escalated to the appropriate authority. • Drive the enterprise-wide Risk and Control Self-Assessment process in coordination with business, operations and technology functions. • Review the completeness and quality of assessments and ensure that risk registers are accurate, current and supported by appropriate evidence. • Define, review and monitor Key Risk Indicators for material risk areas. • Analyse trends, challenge threshold levels and ensure breaches or adverse movements are promptly reported, escalated and addressed through time-bound corrective actions. • Conduct process walkthroughs and detailed risk assessments to understand workflows, dependencies, failure points and existing controls. • Recommend improvements to strengthen control design, operating effectiveness and accountability across relevant functions. • Oversee the operational risk incident management process, including incident identification, classification, impact assessment, reporting and closure. • Review root cause analysis, challenge corrective and preventive actions, track action items and escalate delays or recurring incidents. • Assess operational and technology risks associated with new products, system implementations, major enhancements, process changes, outsourcing arrangements and other business initiatives. • Ensure identified risks are addressed before implementation or formally accepted by the appropriate authority. • Develop risk mitigation plans jointly with business, operations and technology teams. • Define clear actions, owners and target dates, monitor progress and escalate overdue or ineffective actions to senior management and relevant governance forums. • Partner with Technology, Information Security, Compliance, Internal Audit and other control functions to promote a coordinated approach to risk management. • Facilitate information sharing, avoid duplication and ensure consistent assessment and treatment of interrelated risks. • Support the development, implementation and periodic review of the enterprise Risk Appetite Framework. • Assist in defining suitable risk appetite statements, metrics, thresholds and escalation requirements for operational and technology risks, aligned with the organisation’s objectives and regulatory expectations. • Prepare accurate and timely risk reports, dashboards and management updates for senior management and relevant committees. • Provide clear analysis of the organisation’s risk profile, significant incidents, emerging risks, KRI breaches, control weaknesses and mitigation status to support informed decision-making. • Maintain appropriate records of assessments, findings, approvals and closures to demonstrate effective oversight, traceability and compliance with the organisation’s risk management framework. Requirements • Demonstrated experience in Operational Risk Management and/or Technology Risk Management. • Strong knowledge of risk management frameworks, governance practices and internal control environments. • Experience in conducting Risk and Control Self-Assessments (RCSA), maintaining risk registers and monitoring Key Risk Indicators (KRIs). • Ability to perform process walkthroughs, identify risk exposures and evaluate control effectiveness. • Experience managing operational risk incidents, root cause analysis and remediation tracking. • Knowledge of operational and technology risk considerations relating to system implementations, process changes, outsourcing arrangements and business initiatives. • Ability to develop, monitor and drive risk mitigation and corrective action plans across multiple stakeholders. • Strong understanding of Risk Appetite Frameworks, risk metrics, thresholds and escalation requirements. • Experience working with Technology, Information Security, Compliance, Internal Audit and business teams within a three-lines-of-defence environment. • Strong analytical, stakeholder management, communication and report-writing skills. • Ability to prepare risk dashboards, management reports and governance committee presentations. • High attention to detail with strong documentation and record-management capabilities.