Strategic Risk and Compliance Specialist
The role of the Strategic Risk and Compliance Specialist is to develop, implement, and maintain an organisation's enterprise risk, ethics, and compliance matters. This involves demonstrating and supporting a strong risk culture, led from the top, encouraging a shared understanding of accountability, transparency, and acceptable and unacceptable risk decisions where risk is embedded in day-to-day decision making, while managing and mitigating potential risks across the organisation.
Key Responsibilities:
* Support the development and execution of strategic programs as agreed (including overseeing external service providers as relevant).
* Add value by undertaking all activities in support of clients, client services team, corporate functions, leadership team, the Board and Board sub-committees.
* Develop relationships across corporate services to be called on for advice and consultation on a broad range of matters within stakeholders' remit.
* Support a positive risk culture and a culture of compliance across the organisation.
* Contribute to continuous improvement across the organisation.
Key Accountabilities:
* Support the integration, development, and improvement of enterprise-wide risk management, including the enterprise risk register and risk appetite statement.
* Support in the refresh of enterprise-wide risk management documentation, risk profiles, risk appetite statements, and tolerance measures.
* Develop covering papers and reports of enterprise risk updates and trends for key governance committees.
* Encourage integrity-based decision-making processes and conduct by employees throughout the organisation to ensure ethical practices and accountability.
* Stay abreast of industry best practices and emerging trends in risk management and compliance to continuously improve the approach.
* Conduct internal assessment, measurement, and monitoring of risk culture.
Enterprise Risk Assessment, Mitigation, and Monitoring:
* Work with internal teams and Board sub-committees to support regular enterprise risk assessments across the organisation, identifying potential risks and vulnerabilities, including emerging risks.
* Work collaboratively with internal teams to support them in implementing the system of controls across each of the functional areas of the organisation.
* Together with the Chief Risk & Ethics Officer, work with internal teams and Board sub-committees to develop and implement risk mitigation strategies and action plans, controls, and standards to minimise the organisation's exposure to risk.
* Monitor the effectiveness of risk mitigation efforts (controls and treatments) and make, or influence others to make, necessary adjustments.
Policy Development and Implementation:
* Together with the Chief Risk & Ethics Officer, develop, review, and revise risk management, ethics, and compliance policies, ensuring they align or exceed relevant regulations and industry standards. Assisting with other governance documents and activities as needed from time to time.
* Manage the communication and dissemination of policies throughout the organisation, ensuring employee awareness and understanding.
Compliance and Assurance Monitoring and Activities:
* Support and monitor compliance with applicable external laws and regulations, ensuring adherence to legal requirements.
* Support and monitor compliance with internal policies and other obligations, including commitments made by the organisation to stakeholders.
* Together with the Chief Risk & Ethics Officer, stay current with changes in laws, regulations, and industry standards that affect the organisation's operations and make necessary adjustments to maintain and update compliance practices accordingly, drawing on the General Counsel for advice/interpretation as required.
* Coordinate with the Chief Risk & Ethics Officer and the organisation's General Counsel to maintain compliance and engage with regulatory agencies and other stakeholders.
* Utilise monitoring mechanisms, with a focus on enterprise risks, and creating an efficient and effective approach to monitoring that is complimentary to other functional areas.
* Together with the Chief Risk & Ethics Officer, support and provide guidance on functional areas compliance/monitoring activities.
* Conduct monitoring and regular reviews and assessments to evaluate compliance activities and identify recommendations to improve compliance and address any compliance issues.
* Coordinate, oversee, and serve as the primary contact point for the organisation's internal audit function and external providers carrying out third-line activities, including internal audits.
Ethical Standards, Practice, and Training:
* Support a culture of ethics and compliance throughout the organisation, setting an example for employees and leaders.
* Together with the Chief Risk & Ethics Officer, create guidance materials, training programs, and educational resources to ensure employees are well-informed about the organisation's Code of Conduct to enhance their understanding of conduct, compliance, and ethical standards. Support a culture of awareness and accountability.
Environment, Social, and Governance (ESG):
* Support the Chief Risk & Ethics Officer with the development of the ESG Strategy and tracking of initiatives.
* Support the Chief Risk & Ethics Officer with internal and external ESG reporting requirements, including twice-yearly Allegro Portfolio Company ESG (Pulsora) reporting requirements.
* Participate in Allegro Portfolio Company ESG forums and undertake / implement related activities.
Business Continuity, Crisis Management, and Incident Management:
* Support the development and management of the organisation's Business Continuity and Crisis Management documentation including policy and framework, business impact assessments, business continuity plans, and incident playbooks alongside business stakeholders. Facilitating and coordinating the conduct and continuous improvement of our preparedness and response and recovery activities.
* Act as Event Manager in the event of a business continuity or crisis event.
* Together with the Chief Risk & Ethics Officer, develop and implement an incident response plan, together with relevant internal policies and procedures, to support the organisation's regulatory, litigation, and reputational risk management, ensuring the organisation's commitment to address compliance breaches, ethical violations, or other risk-related incidents.
* Conduct or delegate investigations into such incidents and implement corrective actions to prevent re-occurrence.
Reporting and Communication:
* Support the Chief Risk & Ethics Officer by working with internal teams and Board sub-committees to prepare regular reports on the organisation's enterprise risk, ethics, internal audits (including agreed management actions), ESG, business continuity, and compliance status, activities, and performance. This includes monitoring and reporting on necessary corrective actions, and ensuring such actions are completed.
* Together with the Chief Risk & Ethics Officer, provide support to the organisation's Board sub-committees, particularly the Audit and Risk Committee and the Probity, Conflict, and Ethics Committee.
* Support and build awareness of the EREC team activities across the enterprise (e.g., development of content for National Town Hall meetings, presentations, etc.).
Efficiency and Innovation:
* Together with the Chief Risk & Ethics Officer, identify opportunities to scale efficiencies and introduce new ways of working across multiple projects and environments, driving continuous improvement and innovation.
* With the Chief Risk & Ethics Officer, identify and execute initiatives to improve operational processes, reduce risk, and enhance quality.