Head of Enterprise Risk Management - #1171254

The Job

• Lead JP Corporate Risk Review cycle, which involves the following, prior to approval by JP Board:
• Facilitate quarterly risk review discussions with divisions/ departments which owns Corporate Risks to review their risks, state of control measures and key risk indicators, taking into account of JP’s risk appetite.
• Engaging division/ department HODs to review their risk register and surface potential Corporate Risks.
• Conduct horizon scanning and assess emerging risks that may impact JP’s operations and projects. Benchmark with maritime industry counterparts to identify key and emerging risks and support appropriate risk mitigation.
• Review relevant reports and incidents, such as WSH incidents and security threats, and work with relevant departments to assess the adequacy of JP’s existing controls.
• Review regulatory requirements with relevant departments and report key findings to the ARC and Board annually.
• Provide risk oversight for key projects through project committees and meetings, monitor developments and emerging risks, and assess potential impacts. Support corporate risk reviews by consolidating project risk updates, highlighting key risk areas and following up on mitigation actions.
• Review presentation decks which detail JP’s Corporate risks for RMM, ARC and Board.
• Facilitate discussions on proposed corporate risks with the SLT and HODs, assess their significance and identify any key risks requiring Board attention.
• Presents the proposed corporate risks with it’s residual risk levels, control measures and KRIs to ARC and Board, together with the rationale for it being a corporate risk.
• Lead discussions with risk owners on assessing key risk indicators’ results, which are escalated to ARC and Board in accordance with ERM Governance structure.
• Lead development and operationalization of Project Risk Management process
• Facilitate project risk assessments with stakeholders using the project risk management checklist, covering key areas such as resources, regulatory requirements and timelines.
• Escalate residual high and medium risks to the Project Sponsor or relevant authority for oversight and follow-up.
• Operationalise the Business Continuity Management (BCM) framework and crisis management plan.
• Work with operational units to identify and assess relevant business continuity scenarios aligned with JP’s strategic objectives.
• Develop business continuity and resilience strategies and plans through scenario planning to mitigate operational disruptions.
• Review departments’ Business Impact Analysis (BIA), recovery strategies and recovery procedures.
• Identify and develop additional continuity and recovery measures, and enhance the practical execution of recovery procedures.
• Lead discussions with departments to review crisis response plans and validate readiness through tabletop and ground exercises, including scenarios such as IT failure, security threats, fire and power outage.
• Act as Crisis Coordinator to support the Incident Director/Manager and coordinate with relevant stakeholders during crisis situations.
• Lead review of JP’s Enterprise Risk Management (ERM) and BCM framework and policies, to ensure relevancy.

The Requirements

• Degree in Business, Finance, Economics, Quantitative Finance or Engineering.
• Knowledge or professional certification in Business Continuity Management (ISO 22301/SS 540) and Enterprise Risk Management (ISO 31000).
• Minimum 12 years of relevant working experience, with at least 6 years of direct experience in Enterprise Risk Management or similar governance and compliance roles. Strong knowledge of risk management methodologies, tools and frameworks (e.g. ISO 31000, COSO) is required.
• At least 6 years of experience in large-scale or construction project management is highly desirable.
• Strong stakeholder management, interpersonal and communication skills, with the ability to work independently and collaboratively across different levels.
• Strong critical thinking and questioning skills, with the ability to challenge existing practices and identify potential risks or improvements.
• Proactive and results-oriented, with strong ownership and follow-through.