Risk Management Officer

About the role

The Risk Management Officer will coordinate and implement the Higher Education Authority’s enterprise risk management framework, safeguard institutional assets, support operational continuity and inform strategic decisions. The role identifies, assesses, monitors and supports mitigation of strategic, operational, financial, reputational and compliance risks affecting the Authority’s quality‑assurance mandate.

Key responsibilities

• Develop, review and implement risk management policies, procedures and the Enterprise Risk Management (ERM) framework, integrating risk management into planning and operations.
• Lead departmental risk identification and assessment exercises, including analysis of emerging higher‑education sector, financial, regulatory and cybersecurity risks.
• Consolidate departmental risk registers, evaluate controls and work with risk owners to develop mitigation plans.
• Monitor key risk indicators and mitigation actions, providing timely alerts to the Director General on significant exposures.
• Prepare quarterly and annual risk reports for senior management and the Board Audit, Risk and Compliance Committee, advising on strategic decisions.
• Track statutory compliance obligations and coordinate with Internal Audit and oversight bodies on risk‑related governance gaps.
• Train and support departmental Risk Focal Points and staff to strengthen risk awareness and institutional risk management practice.
• Engage higher‑education institutions, government ministries and partner agencies on relevant risk matters.

Required profile

• Full Grade 12 School Certificate or equivalent with five O‑Level credits, including English and Mathematics.
• Bachelor’s degree in Risk Management, Finance, Business Administration, Accounting, Economics or a related field.
• Minimum three years progressive experience in enterprise risk management, compliance, internal audit or corporate governance, preferably in a public‑sector or regulatory environment.
• Relevant professional certification (CRMP, CRISC, CIA, CRMA) or Institute of Risk Management (IRM) membership is an added advantage.

Required skills

• Advanced computer literacy in Microsoft Office.
• Proficiency with risk management software.
• Ability to use data analysis tools.