Risk & Compliance Manager

Perform risk identification, assessment, monitoring and reporting activities. Participate in building and standardizing the system of internal regulations, processes and SOPs (Standard Operating Procedures), with particular focus on supply chain operations; support the implementation of internal control and compliance activities under the approved plan.
1. Enterprise Risk Management (ERM)
- Analyze business operations to identify key risks and control gaps; develop and maintain risk management policies, risk appetite and assessment methodology.
- Maintain the Company-wide Risk Register; establish KRIs and early-warning thresholds.
- Consolidate and report material risks to the BOD/Members' Council; recommend and monitor mitigation actions.
2. Supply Chain Risk Management - Key Focus
- Identify and assess risks across procurement, suppliers, logistics and inventory; develop and standardize relevant SOPs and controls.
- Establish supplier risk assessment and classification, including due diligence, financial, dependency and ESG/compliance risks.
- Develop supply chain disruption scenarios, contingency plans and support Business Continuity Planning (BCP).
- Monitor key operational risks and provide early warnings on delivery, quality, inventory, logistics costs, commodity prices and FX.
- Review insurance programs and coordinate loss/claim handling.
3. Contract & Transaction Risk
- Review risks in commercial, service and logistics contracts with Legal and relevant departments; recommend appropriate risk controls.
- Support dispute and claim management; identify root causes and recommend preventive measures.
4. Internal Control & Compliance
- Review and challenge policies, procedures, authority matrices and key controls across departments.
- Develop risk-based internal control review plans; assess control effectiveness and monitor corrective actions.
- Monitor regulatory requirements and ensure relevant compliance requirements are incorporated into Company policies and procedures.
- Provide compliance advice and organize compliance awareness/training.
5. Anti-Fraud, Anti-Bribery & Anti-Corruption
- Develop and maintain policies on fraud, bribery, corruption and conflicts of interest, with focus on procurement and supplier risks.
- Manage the whistleblowing channel; assess red flags, coordinate investigations and recommend control improvements.
6. Team Management
- Lead, coach, develop and evaluate team members.
- Perform other duties as assigned by the BOD/Members' Council.