Senior Risk Officer

Position Overview

We are seeking a highly motivated and experienced Senior Risk Officer to join our team and play a pivotal role in advancing HMMME’s Enterprise Risk Management (ERM) programme. In this hands-on position, you will be responsible for leading risk identification, assessment, monitoring, and reporting activities to ensure robust risk oversight across the organization. You will serve as the custodian of the enterprise risk register and Key Risk Indicators (KRIs), collaborate with risk owners to track mitigation actions, and deliver clear, actionable risk insights to senior management and the Audit & Risk Committee (ARC). This role offers an opportunity to shape risk culture, drive continuous improvement in risk processes, and contribute to strategic decision-making at the highest levels.

Key Responsibilities

Leadership and People Management

• Support the Risk Manager in executing the ERM programme, including guiding junior staff, contractors, or interns where assigned, and providing coaching to enhance their risk management capabilities.
• Actively contribute to the development and refinement of risk processes, tools, and methodologies, proposing practical enhancements to improve efficiency and effectiveness.
• Champion a strong risk culture within the organization by advocating for best practices, fostering collaboration, and promoting accountability among risk owners and stakeholders.

Collaboration and Stakeholder Engagement

• Work closely with cross-functional teams, including Internal Audit, Compliance, Health, Safety & Environment (HSE), Finance, and Project/Operations, to gather risk intelligence and ensure a coordinated assurance approach.
• Facilitate knowledge sharing within the Risk Team and across the organization to strengthen collective risk management capabilities and align on industry best practices.
• Engage proactively with risk owners to maintain accurate and up-to-date risk information, ensuring alignment with operational developments and strategic objectives.

Risk Identification and Assessment

• Lead and execute risk identification and assessment activities, including facilitating or co-facilitating risk workshops with business stakeholders to document risks, causes, consequences, and existing controls.
• Apply the Company’s standardized risk scoring methodology consistently to ensure objective and comparable risk evaluations, preparing clear and concise risk assessment outputs for leadership review.
• Conduct in-depth risk assessments and scenario analyses on critical risk areas, such as supply chain and logistics, project delivery, and regulatory compliance, to identify vulnerabilities and mitigation opportunities.

Risk Register and Monitoring

• Serve as the day-to-day custodian of the enterprise risk register, ensuring all entries are complete, accurate, current, and properly assigned to accountable risk owners.
• Maintain and monitor Key Risk Indicators (KRIs), collecting relevant data, tracking performance against thresholds, and promptly escalating breaches or adverse trends to the Risk Manager for timely intervention.
• Conduct horizon scanning to identify emerging risks, assess their potential impact, and recommend proactive measures to mitigate future threats.

Risk Treatment and Reporting

• Track the progress of risk treatment and mitigation action plans, following up with action owners, challenging revised timelines, escalating overdue actions, and verifying the completion of closed actions to ensure effective risk reduction.
• Prepare draft risk reports, heat maps, KRI dashboards, and materials for the Audit & Risk Committee (ARC), ensuring consistency in risk ratings and clarity in presenting key risk themes and priorities.
• Support the consolidation of risk information into enterprise-level themes, providing senior management with a holistic view of the organization’s risk profile and strategic risk considerations.

Business Continuity and Compliance

• Provide support to the Business Continuity Management (BCM) programme, including conducting business impact analyses, maintaining continuity plans, and ensuring alignment with ISO 22301 standards.
• Adhere to all risk-related policies, procedures, and the Company’s Delegation of Authority, ensuring compliance with regulatory requirements and internal governance frameworks.

Budget and Resource Management

• Operate within the allocated expense budget for the Risk Function, seeking approval from the Risk Manager for any variations, including travel and consultant expenditures, prior to incurring costs.

Qualifications and Experience

To excel in this role, you will possess a minimum of five years of progressive experience in risk management, with a strong background in enterprise risk frameworks, methodologies, and reporting. A professional certification such as CRCM, FRM, or equivalent is highly desirable. Excellent analytical, communication, and stakeholder management skills are essential, along with the ability to distill complex risk information into clear, actionable insights. Proficiency in risk management software and data visualization tools is advantageous. This position requires a proactive mindset, a commitment to continuous learning, and the ability to thrive in a dynamic, collaborative environment.