Manager – Risk & Controls, CISO and Business Resilience

About the role

The role is responsible for identifying emerging and existing risks across operations, technology and cyber domains, acting as the first line of defence. It also combines the duties of Information Security Officer and Business Resilience Manager, supporting governance, audit and regulatory engagement.

Key responsibilities

• Support the Country CTOO in risk control ownership and ensure alignment with the Enterprise Risk Management Framework.
• Lead information and cyber security risk management, including strategy development, investment prioritisation and regulatory compliance.
• Oversee business continuity, crisis management and disaster recovery planning across all departments.
• Coordinate mandatory risk forums, regulatory reporting governance and risk reporting to committees.
• Audit technology, data, non‑financial regulatory reporting and ensure findings are accurately managed.

Required profile

• Proven experience in risk management, information security and business resilience within a large organisation.
• Strong ability to engage with regulators, senior stakeholders and cross‑functional teams.

Required skills

• Risk assessment and control monitoring.
• Cybersecurity governance and data governance.
• Business continuity planning and crisis management.