Manager – Operational Risk

Engineering Graduate or MBA from HEC recognized university with at least 4 years of relevant experience.

Registration with PEC is mandatory for Engineers.

Responsibilities:

JOB SUMMARY

The purpose of this position is to facilitate the implementation of risk management framework at technical or operational units including Transmission and Distribution functions in accordance with SSGC's policies and applicable regulatory guidelines. The incumbent is also responsible to guide the departments in controlling the identified risks.

JOB RESPONSIBILITIES

• Providing consultative oversight and programs to the business units with respect to the Risk Management.
• Planning, designing and implementing of overall operational / engineering risk management process.
• Provide guidance in light of the ERM Framework, facilitates the first line of defense, in identifying, assessing, evaluating, categorizing, prioritizing, monitoring and controlling all significant risks facing the Entity.
• Provide guidance in identifying and assessing risk and determining the adequacy and cost effectiveness of controls.
• Processes, systems, procedures and data management capabilities to support the enterprise-wide risk management framework.
• Develops and implements risk dashboards to monitor key operational risks using Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).
• Lead risk identification, assessment and on-going monitoring activities for high risk operational / engineering processes.
• Conduct analysis, develop risk methodologies, and drive the implementation of strategies, policies, procedures, and internal controls to identify issues resulting from internal and/or external audits.
• Identify and/or resolve risk issues impacting the business, including conducting control reviews or gap analyses for existing processes, as needed.
• Perform Process mapping analysis and process re-engineering.
• Review the plan to maintain the enterprise risk management system up-to-date through periodic updates of risk registers.
• Guide the technical departments to finalize and fill in the risk related entries and mitigation actions within the risk registers.
• Work closely with the technical departments to undertake a thorough risk assessment in order to obtain an understanding of the risks to assets, systems and manpower and with a view to identify threats, vulnerabilities, probabilities of occurrence and potential impact.
• Encourage the technical departments to highlight the risks for which there may not be any appropriate mitigation action available for the time being.
• Support the department in classifying the identified risk in terms of level of severity and probability of occurrence.
• Prioritize high risk areas for effective mitigation measures.
• Monitor the departments' progress on a regular basis to check if necessary actions have been taken to mitigate the risks.
• Conduct training and awareness sessions for the employees of the user departments to create a culture where risks are timely identified and removed with appropriate actions, including correct entry in the risk register templates.
• Initiate steps to develop e-learning module to create awareness of the risk related concepts and enterprise risk management program at SSGC.
• Ensure that employees undergo the initial course of e-learning module and then complete the refresher course once every two years.
• Coordinate with the training function to include risk management training as part of new employees' induction program.
• Review the monthly reports prior to submission to the management, includes the status of the identified risks and the corresponding mitigation actions.
• Review the annual performance report on SSGCL and departmental risk prior to submission to the management and Board Risk Committee.
• Keep abreast with the trends and developments in risk management that may be significant to the gas transportation and distribution industry.
• Support SSGC's senior management with any aspect of risk management development and deliver risk management training for the senior management.
• Apply the relevant approach in taking steps in risk reduction, risk acceptance where risks are accepted, risk transference where all or most of the assets are insured and risk avoidance where the department decides not to engage in a risky activity.
• Write articles to create risk awareness for publication in the company's magazines.
• The individual shall ensure compliance to the Enterprise Risk Management Framework enforced in the Company while performing job responsibilities in accordance with his assigned role.
• The individual shall ensure compliance to the Business Principles and Ethics Policy / Code of Conduct.
• Perform any other task assigned by superiors.