Manager, Risk Management

Effectively manage all risk exposures of an internal or external nature (strategic, operational, compliance, financial, technology, external) in relation to compliance to internal policies, processes, laws, and regulations.

Responsible for reporting to the business on risk management processes, in line with Enterprise Risk strategy and best practices, offering specialized advice and recommendations, where necessary planning and guiding the Risk Analysts to conduct detailed risks assessments and/or risk deep dives, analyses, and monitoring of remediation across all possible internal and external risks.

• Implement and monitor the established Enterprise Risk Management programme and methodology for assigned area, within established Enterprise Risk Management standards, frameworks, and solutions, in accordance with both internal and industry benchmarks.
• Ensure that business units across the organization take ownership in the identification and management of their divisional risks to guarantee safeguarding MTN Ghana’s customers, reputation, assets and the interests of stakeholders as well as manage the implementation of the Continuous Control Monitoring (CCM) activities for proactive, regular and automated monitoring of key controls to ensure that they are effectively operating as designed and that plans are in place to fix any control breakdown.
• Build a risk-aware culture in the organization by providing ongoing education, appropriate briefing and training to leadership and employees on Enterprise Risk Management and their respective roles in the implementation and alignment with the Risk Management Framework.
• Responsible for identification of risks faced by the business (current and anticipated), prioritizing risks depending on its material impact and working with Senior Management and other leaders within the business to mitigate these as effectively as possible.
• Understand, rack and articulate risks/issues/process gaps/actions and work with divisions (Governance Champions and Executives) to address the risk items on a timely basis.
• Support management in the drive for automation using technology tools (eGRC)
• Research emerging risks and trends in the Telcom & ICT industry and advise management where appropriate
• Manage the identification and evaluation of with the support of divisional Risk champions
• Facilitate Governance Committee Meetings and ensure all relevant risk inputs are considered during engagement
• Responsible for managing the Risk Dashboard for Risk Partnership areas.
• Manage the facilitation of annual/biannual Business Impact Analysis for the organization.
• Perform gap analyses on current risk issues of critical areas of the business as per integrated plan.
• Manage the maintenance of the Risk Dashboards for executive management.
• Manage the performance of the organization’s ERM, BCM, CRM and IRM Maturity Assessments, as per Group’s model.
• Share knowledge/ best practices and foster relationships with Governance Champions by working closely to ensure a coordinated approach to risk identification and management.
• Provide guidelines for the update of and review of IT and Network Group disaster recovery plans to ensure procedures for core critical systems are always up to date.
• Manage simulations/exercises at business unit level and integrated tests at company-wide level.
• Manage the conduct of annual/bi-annual signing of Management Attestations.
• Manage the facilitation of companywide Risk Workshops with the Risk Champions and Excom.
• Contribute to the Companywide Principal Residual Risk Rating Conclusions with the Risk Champions, Excom and Business risk management (BRM) counterparts.
• Contribute to Risk Based Audit Plan and report on risks to the stakeholders and the sub-committees of the board.
• Contribute to the yearly Risk Management plan aligned to BRM themes.
• Documenting of Risk red flags, escalations, and acceptances in line with the risk escalation and acceptance policy
• Ensure effective implementation of Continuous Control Management (CCM) framework and the Identification of key control areas to include in the CCM tool.
• Manage the identification and classification of mitigation controls for each control breakdown.
• Ensure communication of exception reports to management and the development of mitigation plans
• Preparation and communication of exception reports to Audit, for Continuous Auditing
• Ensure continuous reassessments of the agreed controls

• Dynamic and highly competitive telecommunication & ICT industry
• Multi regulated environment.
• Environmental, social and governance prioritized.
• Localization a key objective for business and government
• Multinational environment – Risk & Compliance Group best practices
• Performance driven environment
• Diverse cultural environment
• Partnerships