Senior Risk Officer

Role Overview

As a Senior Risk Officer, you will play a pivotal role in advancing HMMME’s Enterprise Risk Management (ERM) programme by executing comprehensive risk identification, assessment, monitoring, and reporting activities. You will serve as the custodian of the enterprise risk register and Key Risk Indicators (KRIs), collaborating closely with risk owners across the organization to track mitigation efforts and deliver precise, actionable risk insights to senior leadership and the Audit & Risk Committee (ARC). This role demands a strategic mindset, strong leadership capabilities, and the ability to foster a robust risk culture while driving continuous improvement in risk management practices.

Key Responsibilities

Leadership and People Management

You will support the Risk Manager in executing the ERM programme, providing guidance and oversight to junior staff, contractors, or interns as assigned. Your responsibilities will include:

• Coaching and transferring knowledge to first-line risk owners and workshop participants to enhance their risk management competencies.
• Proactively identifying and recommending practical improvements to risk processes, tools, and methodologies.
• Championing a strong risk culture and advocating for necessary changes across the organization.

Collaboration and Stakeholder Engagement

This role requires seamless collaboration across multiple functions, including Internal Audit, Compliance, Health, Safety & Environment (HSE), Finance, and Project/Operations teams. Your duties will involve:

• Gathering and consolidating risk information to support a coordinated assurance approach.
• Sharing best practices and risk insights within the Risk Team to strengthen collective expertise.
• Engaging with peers and risk owners to ensure risk data remains accurate, current, and reflective of operational realities.
• Leveraging the broader Audit & Risk Department to streamline administrative tasks and enhance efficiency.

Business Partnering and Reporting

You will build and maintain strong relationships with risk owners to stay informed about operational developments and their potential impact on the risk profile. Additional responsibilities include:

• Supporting the Risk Manager in preparing departmental and ARC risk reports, ensuring clarity and alignment with strategic objectives.
• Developing internal and external relationships to facilitate the effective sharing of risk information.

Budget and Policy Compliance

You will operate within the Risk Function’s expense budget, ensuring all expenditures—including travel and consultant costs—are pre-approved by the Risk Manager. All activities must adhere to the ERM Policy, methodology, and the Company’s Delegation of Authority framework.

Risk Identification and Assessment

Your core responsibilities will include:

• Planning and executing risk identification and assessment activities, including facilitating or co-facilitating risk workshops with risk owners.
• Documenting risks, their causes, consequences, and existing controls in alignment with the Company’s risk scoring methodology.
• Conducting in-depth risk assessments and scenario analyses on critical areas such as supply chain, project delivery, and compliance.

Risk Register and Monitoring

You will act as the day-to-day custodian of the enterprise risk register, ensuring all entries are complete, accurate, and properly owned. Additional duties include:

• Maintaining and monitoring Key Risk Indicators (KRIs), collecting data, tracking thresholds, and escalating breaches or adverse trends to the Risk Manager.
• Performing horizon scanning to identify emerging risks for timely escalation.

Risk Treatment and Reporting

You will track risk treatment and mitigation action plans, following up with action owners, challenging revised timelines, escalating overdue actions, and verifying the closure of completed actions. Your reporting responsibilities will include:

• Preparing draft risk reports, heat maps, KRI dashboards, and ARC materials for the Risk Manager’s review, ensuring consistency in ratings and clarity in key messaging.
• Supporting the consolidation of risk information into enterprise-level themes for senior leadership and committee review.

Business Continuity Support

You will contribute to the Business Continuity Management (BCM) programme (ISO 22301), including business impact analysis, plan maintenance, and the coordination and documentation of continuity exercises.

Qualifications and Experience

To excel in this role, you should possess:

• A minimum of 5 years of experience in risk management, with a strong background in enterprise risk frameworks and methodologies.
• Proven leadership experience, with the ability to mentor and guide junior team members.
• Excellent analytical, communication, and stakeholder management skills.
• Familiarity with risk assessment tools, KRIs, and risk reporting frameworks.
• A strategic mindset with the ability to identify and address emerging risks proactively.