Risk Manager - Midrand
- Gauteng
- Permanent
- Full-time
- Matric or equivalent Senior Certificate
- Degree in Risk Management, Finance, Accounting, or related field
- Minimum of 4 - 7 years in risk management, internal audit, or compliance preferably within the industry
- IFRS reporting, financial controls, and regulatory compliance
- CRMA, CISA or CA (SA)
- Proactively identify potential operational, regulatory, compliance, and business risks within the relevant function.
- Conduct regular risk assessments using both qualitative and quantitative methods to evaluate the likelihood and potential business impact of identified risks.
- Monitor emerging industry trends, economic shifts, and regulatory changes that could affect organisational operations.
- Support management in identifying and assessing business controls, potential risks, process gaps, and
Internal Controls and Process Strengthening
- Develop, implement, and maintain robust internal controls to safeguard organisational assets and ensure compliance with company policies, legislation, and healthcare regulations.
- Collaborate with operational and support teams to review processes, identify control weaknesses, and implement improvements that minimise fraud, errors, or non-compliance.
- Ensure segregation of duties in key operational processes, particularly in procurement, supplier payments, and stock management for pharmaceutical products.
- Perform procedures to verify that key controls identified by management are in place and operating effectively.
- Conduct control testing and implement process improvement initiatives to address identified risks.
- Manage the review of internal operational controls in line with Johannesburg Stock Exchange (JSE) requirements, ensuring that controls and the annual review plan are up to date and compliant.
- Define, implement, and maintain a comprehensive group risk monitoring tool to track, measure, and report on key risk indicators across the organisation.
- Partner with business units to develop risk mitigation plans and ensure risk policies are regularly reviewed and updated in line with operational needs and regulatory requirements.
- Update risk registers quarterly to ensure all identified risks are consistently recorded, assessed, and monitored.
- Monitor key risk indicators (KRIs) such as supplier concentration risks, operational disruptions, exchange rate volatility for imported goods, and market dependencies.
- Recommend mitigation strategies such as insurance coverage, contractual safeguards, supplier diversification, or operational contingency plans.
- Monitor and investigate KPIs that fall outside normal thresholds each month, identifying root causes
- and potential risk implications.
- Prepare detailed documentation and provide support for Enterprise Risk Committee (ERCO) meetings and the Audit and Risk Committee (ARC), ensuring decision-makers receive accurate, timely, and actionable information.
- Establish risk dashboards and reports to provide the CFO and other stakeholders with clear visibility of priority organisational risks and mitigation actions.
- Act as the key liaison between operational teams, legal/compliance, support functions, and senior management on risk-related matters.
- Conduct regular training sessions for relevant business units on risk awareness, compliance obligations, and industry-specific operational risks.
- Present risk findings and recommendations to executive management and the board, ensuring leadership has the necessary information to act.
- Support the organisation in integrating risk considerations into strategic planning, resource allocation, and operational forecasting processes.
- Advise on risk implications of major organisational decisions such as mergers, acquisitions, large-scale projects, or expansion into new markets.
- Align enterprise risk management activities with the company's overall strategy to support sustainable growth in a highly regulated sector.
- Strong knowledge of enterprise risk management principles, frameworks, and
- Strong analytical and critical thinking skills to assess complex operational and strategic data, identify potential risks, and uncover process inefficiencies.
- Ability to integrate risk considerations into strategic planning, resource allocation, and
- Strong relationship-building and influencing skills to foster collaboration across operational, legal, compliance, and support teams, driving adoption of risk management best practices.
- Detail-oriented with a strong focus on continuous improvement of risk processes, internal controls, and KPI monitoring.
- Proactive in identifying risks before they materialise and initiating preventive measures.
- Ability to set a clear vision for risk management and inspire teams to uphold compliance standards.
- Skilled in planning, prioritising, and coordinating risk management activities, with strong project management expertise for implementing risk monitoring tools and process improvements.
- Proficient in designing and implementing Group Risk Monitoring tools and KRIs, with strong Excel and data modelling skills for risk scenario analysis.
- South African citizen
- MIE, clear criminal and credit
- Driver's license and/or own reliable transport
- Occasional travel
- Market related salary
- Medical aid
- Provident fund
- Staff account