Assistant Manager, Enterprise Risk Management

Assistant Manager, Enterprise Risk Management (UE4)

JOB PURPOSE

To support the implementation and operationalisation of Enterprise Risk Management (ERM) across UEM Sunrise Berhad through risk assessments, risk reporting, risk governance, risk analytics, risk advisory, and risk culture initiatives. The role supports the Integrity & Risk Management team in enabling the organisation to manage risks proactively in line with its strategic objectives. It also contributes to the provision of clear, timely, and relevant risk insights to Management, Board Committees, and the Board of Directors.

JOB ACCOUNTABILITIES

No.

Accountabilities

1

Facilitate the identification, assessment, prioritisation, and review of enterprise-wide risks to support a comprehensive and current risk profile for the organisation.

2

Support the preparation of enterprise risk reports, risk dashboards, and risk insights for Management, Board Governance & Risk Committee (BGRC), and Board deliberations, ensuring timely and quality submissions.

3

Maintain, update, and enhance enterprise risk registers, risk mitigation action plans, and risk tracking mechanisms across business units.

4

Coordinate the identification, review, validation, monitoring, and reporting of enterprise Top Risks, including tracking emerging risks, risk movement, mitigation effectiveness, and management action plans.

5

Support the development, enhancement, review, and implementation of enterprise risk management methodologies, frameworks, risk assessment criteria, risk matrix, likelihood and impact parameters, and related tools and templates.

6

Lead and coordinate periodic Risk and Control Self-Assessment (RCSA) exercises to evaluate risk exposure, control effectiveness, and mitigation adequacy across business units.

7

Support the establishment and monitoring of risk appetite metrics, risk tolerance levels, key risk indicators (KRIs), trigger thresholds, and escalation protocols across the organisation.

8

Support the identification, assessment, monitoring, and reporting of sustainability-related risks, including climate-related risks, in alignment with applicable regulatory and reporting requirements (including IFRS S1 and S2).

9

Monitor and assess emerging risks, external developments, market trends, regulatory changes, and industry practices that may impact the organisation's strategic objectives and risk profile.

10

Support the design and implementation of risk culture initiatives, including maturity assessments, awareness programmes, surveys, communication strategies, and capability-building activities.

11

Promote risk awareness and a proactive risk management culture through targeted workshops, training, and engagement with business units.

12

Undertake risk benchmarking, external research, and any other assignments as required by Management.

MINIMUM ESSENTIAL QUALIFICATIONS & TECHNICAL COMPETENCES

Formal Education

· Bachelor’s degree in business, finance, business administration, economics or related discipline.

Work Experience

Minimum 4–5 years of relevant working experience in one or more of the following:

· Enterprise Risk Management

· Governance, Risk & Compliance

· Internal Controls

· Internal Audit

· Risk advisory or risk consulting roles

Skills / Knowledge/

Qualifications

· Strong knowledge of ERM frameworks and methodologies (e.g. COSO ERM, ISO 31000)

· Ability to facilitate and conduct risk assessments across diverse business functions

· Proficiency in risk reporting, risk analytics, and data visualisation

· Understanding of RCSA design and implementation

· Familiarity with sustainability and climate risk reporting frameworks is an advantage

· Strong analytical and critical thinking skills

· Effective communication and presentation skills

· Strong stakeholder management and influencing skills

· Ability to work independently and as part of a team

· Commitment to promoting risk culture and awareness