ACB Insurance | Enterprise Risk Management | Compliance | Governance
About the Role
Unit Head of Risk Management & Compliance is responsible for establishing and leading ACB Insurance's Enterprise Risk Management (ERM) and Compliance functions, ensuring the company operates within its approved risk appetite, regulatory requirements, and governance standards.
As a key member of the founding leadership team, this role will build and oversee the second line of defense, providing independent oversight of risk and compliance while supporting sustainable growth, operational resilience, and customer trust.
Key Responsibilities
Enterprise Risk Management
Develop and implement the Enterprise Risk Management (ERM) Framework, risk taxonomy, risk assessment methodology, and risk reporting framework.
Establish and monitor the company's Risk Appetite Framework, including risk limits, thresholds, key risk indicators (KRIs), and escalation mechanisms.
Maintain an independent view of the company's overall risk profile and emerging risks.
Compliance Management
Establish and manage the Compliance Framework, Compliance Program, and Regulatory Obligations Register.
Monitor regulatory compliance, identify breaches, track remediation actions, and report compliance status to senior management.
Promote a strong compliance culture across the organization.
Second Line of Defense Oversight
Act as the independent second line of defense by challenging and overseeing risk and compliance activities performed by business units.
Define risk governance standards, control expectations, and monitoring mechanisms.
Ensure appropriate segregation between risk ownership, oversight, and internal audit responsibilities.
Risk Monitoring & Early Warning
Insurance Risk
Capital & Financial Risk
Liquidity Risk
Investment Risk
Reinsurance Risk
Operational Risk
Technology & Cyber Risk
Data & AI Risk
Third-Party Risk
Fraud Risk
Reputational Risk
Develop risk dashboards, management reports, and early warning mechanisms for Executive Management.
Operational Risk & Internal Control
Implement operational risk management frameworks, incident reporting processes, control assessments, and remediation tracking.
Monitor key risk indicators and control effectiveness.
Analyze root causes of incidents and identify preventive actions.
Risk & Compliance by Design
Participate in product development, business initiatives, operational processes, technology projects, partnerships, and transformation programs.
Ensure key risks and compliance requirements are identified and addressed early in the design stage.
Digital Risk & Data Governance
Support the digitalization of risk and compliance management through automation, dashboards, and integrated monitoring tools.
Leverage data analytics to strengthen risk monitoring, compliance oversight, and decision-making capabilities.
Provide oversight of technology, cybersecurity, data privacy, AI, cloud, and third-party risks.
Leadership & Team Development
Build and lead the Risk Management & Compliance team.
Develop talent, capabilities, governance standards, and risk awareness throughout the organization.
Foster a culture of accountability, transparency, and risk-informed decision-making.
Requirements:
Education
Bachelor's degree or above in: Risk Management/Insurance/Finance & Banking/Economics/Law Or related disciplines
Experience
Minimum 8-10 years of experience in Risk Management, Compliance, Internal Control, Audit, or related functions within financial services.
At least 3 years of leadership experience in Risk Management and/or Compliance.
Experience developing Enterprise Risk Management Frameworks, Risk Appetite Frameworks, Compliance Programs, or Three Lines of Defense models.
Experience in non-life insurance is highly preferred.
Experience building governance functions in a start-up, transformation, or newly established organization is a strong advantage.
Professional Expertise:
Enterprise Risk Management (ERM)
Risk Appetite Frameworks
Operational Risk Management
Compliance Management
Internal Controls
Three Lines of Defense
Risk Governance
Understanding of: Insurance Risk/Capital & Solvency (RBC)/Reinsurance Risk/Technology & Cyber Risk/Data Governance & AI Risk/Regulatory Compliance
Thông tin chung