SENIOR MANAGER, GOVERNANCE, RISK & COMPLIANCE (GRC)

ROLE OBJECTIVE Lead and manage the Enterprise Governance, Risk & Compliance function by establishing and embedding risk, governance, and compliance frameworks across the organization. The role ensures independent second-line oversight, enabling leadership to make informed decisions, while maintaining clear separation from operational execution and accountability.RESPONSIBILITIESEnterprise Risk Management (COSO ERM)Establish and continuously enhance the Enterprise Risk Management framework aligned with COSO ERMDefine risk taxonomy, scoring methodology, and reporting standardsEmbed risk appetite and tolerance into business decision-makingMaintain enterprise-wide risk registers covering all business unitsLead risk identification workshops and risk assessmentsEnsure proper classification of strategic, operational, IT, compliance, and HSE risksOversee mitigation planning and track execution progressMonitor high-risk and critical risk exposuresEscalate Risks exceeding appetite, Delayed mitigation actions and Emerging systemic risks  Governance & Policy ManagementDesign and maintain enterprise governance structures and frameworksDevelop policies covering: Risk management, Compliance, Internal controls and Governance standardsEnsure structured policy lifecycle: Drafting, Review, Approval, Periodic updatesEnsure alignment with Regulatory requirements, Industry best standards and Organizational strategyPromote governance awareness across all business unitsEnsure accountability and ownership at first-line level  Compliance OversightEstablish compliance framework and obligation registerMap regulatory and contractual requirements across functionsMonitor compliance adherence across organizationTrack compliance breaches, policy violations, control failuresEnsure timely escalation and resolutionCollaborate with Legal (support function) for Regulatory interpretation, and Legal risk insightsEnsure legal risks are reflected in enterprise risk reporting 4. Risk Reporting, Analytics & Decision SupportDevelop Risk dashboards, Risk heatmaps and Compliance reportsProvide consolidated enterprise risk view to leadershipPrepare risk reports for executive management and Board / CommitteeIdentify emerging and forward-looking risksProvide scenario-based insights for decision-making Integration with QA & HSEWork closely with QA & HSE to integrate quality and safety risks into ERM and align reporting and escalationsEnsure systemic issues are identified and cross-functional risks are addressedSupport integrated enterprise assurance approach Leadership & Team DevelopmentLead and manage GRC teamDefine team structure and capabilities (e.g., risk specialists)Set KPIs, performance standards, and accountabilityDefine competency matrices, certification roadmaps, and continuous learning plans.Champion best practices in solutioning, storytelling, and commercial awareness.