Assistant Manager, Enterprise Risk Management

Job PurposeTo support the implementation and operationalisation of Enterprise Risk Management (ERM) across UEM Sunrise Berhad through risk assessments, risk reporting, risk governance, risk analytics, risk advisory, and risk culture initiatives. The role supports the Integrity & Risk Management team in enabling the organisation to manage risks proactively in line with its strategic objectives. It also contributes to the provision of clear, timely, and relevant risk insights to Management, Board Committees, and the Board of Directors.ResponsibilitiesFacilitate the identification, assessment, prioritisation, and review of enterprise-wide risks to support a comprehensive and current risk profile for the organisation.Support the preparation of enterprise risk reports, risk dashboards, and risk insights for Management, Board Governance & Risk Committee (BGRC), and Board deliberations, ensuring timely and quality submissions.Maintain, update, and enhance enterprise risk registers, risk mitigation action plans, and risk tracking mechanisms across business units.Coordinate the identification, review, validation, monitoring, and reporting of enterprise Top Risks, including tracking emerging risks, risk movement, mitigation effectiveness, and management action plans.Support the development, enhancement, review, and implementation of enterprise risk management methodologies, frameworks, risk assessment criteria, risk matrix, likelihood and impact parameters, and related tools and templates.Lead and coordinate periodic Risk and Control Self-Assessment (RCSA) exercises to evaluate risk exposure, control effectiveness, and mitigation adequacy across business units.Support the establishment and monitoring of risk appetite metrics, risk tolerance levels, key risk indicators (KRIs), trigger thresholds, and escalation protocols across the organisation.Support the identification, assessment, monitoring, and reporting of sustainability-related risks, including climate-related risks, in alignment with applicable regulatory and reporting requirements (including IFRS S1 and S2).Monitor and assess emerging risks, external developments, market trends, regulatory changes, and industry practices that may impact the organisation's strategic objectives and risk profile.Support the design and implementation of risk culture initiatives, including maturity assessments, awareness programmes, surveys, communication strategies, and capability-building activities.Promote risk awareness and a proactive risk management culture through targeted workshops, training, and engagement with business units.Undertake risk benchmarking, external research, and any other assignments as required by Management.QualificationsBachelor’s degree in business, finance, business administration, economics or any related discipline.At least 4 years of relevant working experience in Enterprise Risk Management, Governance, Risk & Compliance, Internal Controls, Internal Audit, Risk advisory or risk consulting rolesStrong knowledge of ERM frameworks and methodologies (e.g. COSO ERM, ISO 31000)Ability to facilitate and conduct risk assessments across diverse business functionsProficiency in risk reporting, risk analytics, and data visualisationUnderstanding of RCSA design and implementationFamiliarity with sustainability and climate risk reporting frameworks is an advantageStrong analytical and critical thinking skillsEffective communication and presentation skillsStrong stakeholder management and influencing skillsAbility to work independently and as part of a teamCommitment to promoting risk culture and awareness