Red ember recruitment is seeking to appoint a Senior Risk Manager for their client in Johannesburg. Suitably qualified and experienced
individual who will be responsible for managing enterprise-wide risks within
the Division through the effective implementation of the Group's Enterprise
Risk Management (ERM) framework. The role will identify, assess, monitor, and
mitigate strategic, operational, financial, compliance, and emerging risks to
protect assets, enhance resilience, support informed decision-making, and
ensure business continuity. The role will also coordinate combined assurance
and track the remediation of assurance findings across the Division.
Main Outputs:
1. Risk Assessment & Strategic Outputs
Divisional Enterprise Risk
Register: Maintain a divisional risk register that assesses, scores and tracks risks
across Destination Retail division. Updated regularly as the organisation
and trading environment evolves.
Risk Appetite Statements
(RAS): Develop and agree thresholds defining
acceptable margins of risk per risk category in line with the Group’s
approved appetite.
Business Continuity & Disaster Recovery
Plans: Ensure that there are structured protocols to
handle proactive planning that keeps the overall business operating during
unfavorable conditions, covering staff safety, alternative workspaces, supply
chains, IT, customer, staff and supplier communication.
· Monitor the implementation and effectiveness of
risk mitigation actions.
Develop risk dashboards to monitor performance
against approved risk thresholds. Dashboards to include monthly executive
reporting on key risks, audit findings and KPIs (e.g. shrinkage vs. target).
Report significant risk exposures to Destination
Retail governance forums and management committees.
Liaise with Group Risk Management on risk
governance, reporting, and ERM-related matters.
2. Combined Assurance
· Monitor and track assurance findings to ensure
timely remediation and closure by accountable management. This includes
maintaining corrective action plans (CAPA) assigned to specific stores or
departments, with clear accountabilities.
Review Control Self-Assessment (CSA) and Financial
Director Review (FDR) outcomes to verify that identified control gaps have been
effectively addressed.
· Support the development and maintenance of combined
assurance maps, identifying assurance gaps, overlaps, and coverage
requirements.
· Provide consolidated combined assurance reporting
to Group Risk Management in line with agreed reporting requirements and
timelines.
3. Operational & Audit
Documentation
Store Audit Checklists &
Compliance Frameworks: Standardised, highly structured criteria for regional and store
managers to evaluate daily physical safety, cash handling, inventory and
asset control.
Shrinkage & Stock-Loss
Mitigation Protocols: Standard operating procedures (SOPs) explicitly targeting
inventory discrepancies, damages, and administrative errors.
Policies and Process flows: Assist with the annual review of the
financial/operational process policies and process flows in line with
internal/external audit requirements
Vendor & Supplier Risk Assessments:
Evaluative: Establish a structured process to identify,
evaluate, and prioritize the threats third-party providers introduce to the
organization.
4. Investigative & Performance Reports
Incident Investigation
Reports: Establish a standardised incident report to track and monitor deviations
from standards and mitigating controls implemented
5. Security & Compliance Controls
Physical Security & Loss
Prevention Frameworks: Review mandates for store layouts, drop-safe requirements, ATM
security, and the integration of CCTV and security guard deployments.
Regulatory & Data
Privacy Frameworks: Review directives ensuring store operations and software strictly
abide by local data laws (such as POPIA) and consumer protection acts.
Staff Training &
Awareness Modules: Review training materials designed to educate cashiers and floor
staff on recognizing fraud, preventing syndicated shoplifting, and
reporting cyber threats.
6. Management of the Regional risk team
Monthly monitoring and reviewing of the regional
risk team’s outputs
· Consolidated reporting of the regional risk team
results for Shrinkage, stock losses etc
Requirements
Key Competencies:
Deadline Driven
High attention to detail
Accuracy
Planning ability
Team player with strong
people management skills
Good communication
skills
Excellent presentation
skills
Qualifications and Skills
The following are non-negotiable
A Qualified Chartered
Accountant, Certified Internal Auditor, Certified Risk Manager or Honors
in Risk Management
At least two years’ post
qualifying experience within audit/risk
Proven experience in
Enterprise Risk Management, Risk Assurance, or Internal Audit with a
strong focus on risk management and governance
Excellent computer literacy,
ERP and Excel is a pre-requisite.
Ideally a candidate with
retail/FMCG experience.
Knowledge of Risk Management
Frameworks (e.g. ISO 31000, COSO etc.)