Director: Risk Management

Requirements

• NQF level 7 Qualification in Risk Management / Auditing / Commerce / Accounting or Finance. 5 years' relevant experience at middle/senior management level. Registered Government Auditor RGA Qualification, CIA/ CCSA/ CFE/ CASA will be an added advantage. Knowledge of generic competencies required: General GPG business. Government regulations, policies, and procedures. General government sector and organisational structure.
• Knowledge of technical competencies required: Knowledge of key risk management concepts, framework, and good practices. Knowledge of the PFMA Act and King 2. Knowledge of Enterprise Risk Management ERM principles. Knowledge of managerial competencies required: Business Acumen. Customer Management. Innovative Continuous Improvement. Decision Making. Problem Solving.
• Skills required: Communications skill. Computer literacy. Interpersonal skills. Analytical, Report writing, Leadership, Strategic, Planning, and Organisation. Attributes required: Be able to work under pressure. Enable Diversity awareness. Inspire innovation within the organisation. Encourage teamwork. Should be cost conscious. Inspire to be Quality Oriented. Nyukela pre-entry certificate must be submitted prior to appointment.

Duties

• Oversee the development and management of the implementation of risk management strategies: Manage the development of risk management control and systems. Manage the analysis of data to detect non-compliance with departmental policies and regulations. Report to management, audit results and recommend changes in operational and financial activities. Manage the monitoring and evaluation of the implementation of risk assessment responses strategies. Continually monitor and evaluate existing framework, risk plan, contingency plans strategies and procedure manuals and identify risk. Monitor the implementation of action of plan to ensure risk mitigation efforts are proceeding as required. Consolidate and compile report on compliance with risk regulatory requirements. Provide strategic risk reports to HOD, Executive Management and Audit Committee. Influence executive decision-making on risk exposure.
• Manage and facilitate the capacity building on departmental staff on risk management: Provide strategic advisory services to Executive Management on risk and compliance matters. Manage the identification of the of training needs for risk management. Oversee the development of the departmental risk competence, evaluation mechanisms, methodologies and awareness programmes across the department. Provide advice on ad hoc risk matters. Monitor and evaluate the adequacy internal control framework in addressing risk mitigation within the department. Manage the adequacy implementation of actions plans in areas highlighted in audit report within the departmental business units. Facilitate the appointment of risk management committee members.
• Manage the development of Organisational risk, policies, procedures, strategies, risk plans and framework: Ensure integration of risk management into strategic planning, budgeting and performance management processes. Develop and review risk management framework, risk plan, strategy and procedure manuals. Oversee the implementation and maintenance of risk management framework, strategies, procedure manuals and business continuity plan strategies. Oversee the identification and analysis of potential deficiencies and risks within the department. Monitor, evaluate and report on the effectiveness and efficiency of the risk management framework and best practices. Continually improve/review risk management framework, strategy, procedure manuals and business continuity plan. Ensure the implementation of the recommendations of enhancement improvement plan/action plans. Ensure compliance with provincial risk management framework.
• Coordinate the development and monitoring of implementation of Business Continuity plan: Ensure the business impact analysis reports for the individual business units are revised. Revise the business continuity plans as and when the need arises. Develop a business continuity strategy. Establish a business continuity steering committee. Work closely with Occupational Health and Safety unit to ensure that an emergency plan is in developed and implemented. Manage the management of data protection and POPIA compliance risks. Manage the oversight of ICT systems and digital service continuity risks. Manage enterprise-wide digital transformation risks across GPG. Table risk and audit reports to all Executive management and Oversight committees. Provide executive-level assurance on audit findings. Advise on governance and performance implications.
• Oversee implementation of internal and external audit recommendations: Engage with internal and external auditors. Participate in audit steering committees both internal and external in consultation with stakeholders. Monitor implementation of the action plans to address audit findings for both internal and external. Provide assurance to internal and external auditors on the implementation of action plans.
• Provide Extended Senior Management Team ESMT, Executive Management Team EMT, Risk Management Committee RMC and Audit Committee AC with feedback on target dates not met and implications for department. Manage the provision of Strategic Governance and Advisory: Advise HOD and Executive Management on enterprise risk exposure. Engage with oversight bodies AGSA, OTP, GAS, Treasury and Provincial Audit Committee.
• Provide input into strategic decision-making. Manage resources human, financial: Build and lead a high-performing team by providing guidance, mentorship, and professional development opportunities. Set clear goals and performance expectations for the team, ensuring alignment with organizational objectives. Foster a collaborative and inclusive work environment that encourages teamwork and continuous learning. Manage all resources, including budget, in terms of the PFMA. Manage and promote the maintenance of discipline within the directorate. Manage leave in the business unit.