Senior Manager, Risk Management and Data Protection

Key responsibilities

• Designing and implementing an overall risk management process for the organization
• Serve as Data Protection Officer (DPO) for the organization and put in data governance framework in the organization
• Regularly reviewing internal risk policy and ensuring compliance with new legislation
• Building risk awareness amongst staff by providing support and training on risk management principles and raising awareness of risk within the organization
• Work closely with relevant stakeholders to ensure effective development and implementation of Risk policies, PDPA Governance, procedures, and compliance to legislation.
• Designing monitoring systems to maintain the level of risk below the established threshold
• Risk reporting tailored to the relevant stakeholders within the business.
• Educating the board of directors about the most significant risks to the business; ensuring business heads understand the risks that might affect their departments; ensuring individuals understand their accountability for individual risks
• Manage the regular review and improvements to business continuity plans to limit risks
• Implementing health and safety measures, and ensuring adequate insurance coverage
• Conducting policy and compliance audits, which will include liaising with the internal and external auditor
• Reviewing any new major contracts or internal business proposals, to mitigate risk for the organization.