Senior Risk Manager

Red ember recruitment is seeking to appoint a Senior Risk Manager for their client in Johannesburg. Suitably qualified and experienced individual who will be responsible for managing enterprise-wide risks within the Division through the effective implementation of the Group's Enterprise Risk Management (ERM) framework. The role will identify, assess, monitor, and mitigate strategic, operational, financial, compliance, and emerging risks to protect assets, enhance resilience, support informed decision-making, and ensure business continuity. The role will also coordinate combined assurance and track the remediation of assurance findings across the Division.

Main Outputs:

1. Risk Assessment & Strategic Outputs

Divisional Enterprise Risk Register: Maintain a divisional risk register that assesses, scores and tracks risks across Destination Retail division. Updated regularly as the organisation and trading environment evolves.

Risk Appetite Statements (RAS):  Develop and agree thresholds defining acceptable margins of risk per risk category in line with the Group’s approved appetite.

Business Continuity & Disaster Recovery Plans: Ensure that there are structured protocols to handle proactive planning that keeps the overall business operating during unfavorable conditions, covering staff safety, alternative workspaces, supply chains, IT, customer, staff and supplier communication.

• Monitor the implementation and effectiveness of risk mitigation actions.

Develop risk dashboards to monitor performance against approved risk thresholds. Dashboards to include monthly executive reporting on key risks, audit findings and KPIs (e.g. shrinkage vs. target).

Report significant risk exposures to Destination Retail governance forums and management committees.

Liaise with Group Risk Management on risk governance, reporting, and ERM-related matters.

2. Combined Assurance

• Monitor and track assurance findings to ensure timely remediation and closure by accountable management. This includes maintaining corrective action plans (CAPA) assigned to specific stores or departments, with clear accountabilities.

Review Control Self-Assessment (CSA) and Financial Director Review (FDR) outcomes to verify that identified control gaps have been effectively addressed.

• Support the development and maintenance of combined assurance maps, identifying assurance gaps, overlaps, and coverage requirements.
• Provide consolidated combined assurance reporting to Group Risk Management in line with agreed reporting requirements and timelines.

3.  Operational & Audit Documentation

Store Audit Checklists & Compliance Frameworks: Standardised, highly structured criteria for regional and store managers to evaluate daily physical safety, cash handling, inventory and asset control.

Shrinkage & Stock-Loss Mitigation Protocols: Standard operating procedures (SOPs) explicitly targeting inventory discrepancies, damages, and administrative errors.

Policies and Process flows: Assist with the annual review of the financial/operational process policies and process flows in line with internal/external audit requirements

Vendor & Supplier Risk Assessments: Evaluative: Establish a structured process to identify, evaluate, and prioritize the threats third-party providers introduce to the organization.

4. Investigative & Performance Reports

Incident Investigation Reports: Establish a standardised incident report to track and monitor deviations from standards and mitigating controls implemented

5. Security & Compliance Controls

Physical Security & Loss Prevention Frameworks: Review mandates for store layouts, drop-safe requirements, ATM security, and the integration of CCTV and security guard deployments.

Regulatory & Data Privacy Frameworks: Review directives ensuring store operations and software strictly abide by local data laws (such as POPIA) and consumer protection acts.

Staff Training & Awareness Modules: Review training materials designed to educate cashiers and floor staff on recognizing fraud, preventing syndicated shoplifting, and reporting cyber threats.

6. Management of the Regional risk team

Monthly monitoring and reviewing of the regional risk team’s outputs

• Consolidated reporting of the regional risk team results for Shrinkage, stock losses etc

Requirements

Key Competencies:

Deadline Driven

High attention to detail

Accuracy

Planning ability

Team player with strong people management skills

Good communication skills

Excellent presentation skills

Qualifications and Skills

The following are non-negotiable

A Qualified Chartered Accountant, Certified Internal Auditor, Certified Risk Manager or Honors in Risk Management

At least two years’ post qualifying experience within audit/risk

Proven experience in Enterprise Risk Management, Risk Assurance, or Internal Audit with a strong focus on risk management and governance

Excellent computer literacy, ERP and Excel is a pre-requisite.

Ideally a candidate with retail/FMCG experience.

Knowledge of Risk Management Frameworks (e.g. ISO 31000, COSO etc.)