Head of Enterprise Risk Management & GRC

Key Responsibilities:

Strategic Risk Management Leadership

• Lead the development and implementation of an integrated ERM framework that aligns with the group’s business strategy and regulatory requirements.

• Ensure the ERM framework accommodates diverse risks including strategic, operational, financial, and compliance risks.

GRC Implementation and Governance

• Formulate and enforce robust GRC policies across all subsidiaries, ensuring comprehensive communication and adherence throughout the organization

• Lead the continuous identification of potential risks through thorough assessments, leveraging insights to develop and implement effective mitigation strategies.

• Stay abreast of regulatory developments affecting the financial and fintech sectors, ensuring that all group operations remain compliant with evolving laws and standards,

Training and Development

• Establish a training program on ERM and Risk Control Self-Assessment (RCSA) for risk managers and other key personnel within the group.

• Promote a risk-aware culture throughout the organization through continuous education and training.

Due Diligence on ERM and Risk Advisory Projects

• Conduct due diligence focusing on the ERM and compliance capabilities of potential partnership targets or acquisition candidates.

• Advise on risk implications in potential mergers and acquisitions.

• Lead and manage risk advisory projects to enhance risk management practices at all levels of the organization.

If you meet below qualifications and are ready to take on a challenging role, we encourage you to apply.

• Minimum 15 years’ experience in risk management roles within the financial services.

• Expertise in governance, risk, and compliance (GRC), especially in strategic planning, process design, training, and fostering an organizational culture in GRC

• Proven experience in leading risk management, compliance, or related teams. Experience managing cross-functional teams and projects is particularly valuable.

• Familiarity with financial regulations and standards both locally in Thailand and internationally.

• Relevant professional certifications such as Certified Risk Manager (CRM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC)