Head, Enterprise Risk and Internal Controls

About the role

The Head of Enterprise Risk and Internal Controls leads the organization‑wide function that designs, implements and continuously strengthens enterprise risk management and internal control frameworks. Reporting directly to the Secretary‑General, the role ensures risk management is embedded in strategy, planning and performance while aligning with international standards such as COSO ERM 2017 and ISO 31000.

Key responsibilities

• Design and oversee the enterprise risk management (ERM) framework and internal control system.
• Coordinate second‑line oversight, ensuring alignment with the Three Lines Model and assurance functions.
• Conduct scenario analysis, stress testing and monitor key risk indicators across the organization.
• Prepare and present governance reports, recommendation follow‑ups and risk dashboards to senior leadership and committees.
• Support the integration of risk considerations into strategic initiatives, planning and performance management.

Required profile

• Advanced university degree in Risk Management, Business Administration, Finance, Engineering, Telecommunications or related field; professional certifications (IRM Diploma, ISO 31000 Lead Risk Manager, COSO ERM, CRMA, CERM) are desirable.
• Minimum ten years of progressive experience in enterprise risk management, internal controls or second‑line governance, with at least five years at the international level.
• Proven experience leading an ERM function, supporting senior governance bodies and integrating risk into strategy and decision‑making.

Required skills

• COSO ERM framework
• ISO 31000 standard
• Enterprise risk assessment techniques
• Scenario analysis and stress testing
• Key risk indicator monitoring
• Internal controls design and compliance monitoring