The role is responsible for developing defining, implementing and monitoring Enetrprise Risk management & Operations Risk management policy & process framework to ensure that the organisational objectives are achieved within the given risk appetite defined by the sh
KRA (Accountabilities) (Max 1325 Characters)
Supporting Actions (Max 1325 Characters)
KRA1
Design and ensure implementation of a comprehensive Operational Risk Management framework
1.Analyse Operational Loss data and basis findings create and release Operational Loss report
2.Drive analysis, creation and release of Key Risk Indicators reports
3.Drive analysis, creation and release of Process risk assessment report
4.Drive closure of ORM actionable within TAT
5.Drive the collation & validation of Risk & Control Self
Assessment testing results of all functions to ensure completeness and quality
6.Drive ORM trainings across functions
KRA2
Design and ensure implementation of a comprehensive Enterprise Risk Management framework
1.Drive and ensure implementation of the ERM framework.
2.Assist business functions in the risk identification process.
3.Drive quarterly review/updates of action plans for Key Risks.
4.Review heat maps for Risk Assessment
5.Carry the risk reporting element through Risk Scorecard
KRA3
Formulate pertinent Risk Management policies, guidelines and best practices with monitoring and reporting mechanisms.
1.Roll out required risk management policies, collaboratively with applicable and pertinent functional heads.
2.Carry policy certification on a quarterly basis
3.Provide input to the annual risk management testing plan (RMT) and conduct testing of compliance to Risk Management Policies
4.Design and implement best practice projects such as Information Classification policy and record retention policy to ensure that business practices are carried on with the objective of achieving process excellence within the overall guidance of risk management policies and guidelines
KRA4
Initiate new risk management projects to oversee risk assessment process in key business initiatives in lines with the Risk Maturity Model
1.Carry on risk management initiatives such as:
Product Risk Assessment
Process Risk Assessment
System Risk Assessment
Outsourcing Risk Assessment
New business initiative risk Assessment
2.Make decisions on risk management issues that impact strategic direction of BSLI
3.Providing independent view regarding proposed business plans and transactions
4.Work with business units to establish, maintain and continuously improve risk management capabilities
5.With an objective that risk management is inculcated as a part of the business practices rather than a standalone activity and that business practices are carried on with a consideration of formal risk assessment.
KRA5
Develop framework for outsourcing
1.Develop framework for outsourcing of activities for BSLI
2.Evaluate the outsourcing arrangements from risk perspective
3.Get board approval for such arrangements
4.Monitor the performance of the vendor & report to the board committee
KRA6
Update the Board Level and Internal Risk Review Committee on key business risks of BSLI through committee meetings and risk reporting
1.Keep the Risk Review Committee informed to present a cohesive view rather than segmented view on risk management of:
Current Business risks;
Risk management strategies to mitigate those risks;
An integrated response on potential risk issues and
New Risk Management initiatives
2.Implement appropriate risk reporting to the CEO, Risk Review Committee and Board
3.Performance metric design and implementation in order to ensure that Risk review committee is updated on overall business risks being managed within acceptable limit
KRA7
Drive awareness and culture creation
1.To develop a risk culture through a risk awareness model through the following means to ensure that benefits of risk management are clearly recognised by the workforce and risk management practices are accepted as a business practice by intent
Web based training
Personalised training
Train the Trainer
Content reinforcement
2.Highlight security breaches and incidents to Function Heads and develop strong punitive action for the same.
3.Monitor results of Sweeps conducted and ensure that management is cognizant of its consequences
KRA8
Team Management
1.Motivate the team, developing their technical risk skills as well as soft skill competencies to improve effectiveness and productivity year-over-year.
2.Build transparent and robust career progression plans for team members to ensure that the team is geared up to deliver on a consistent basis
