1. Risk Identification and Assessment
- Identify potential risks across the organization, including business, financial, insurance, operational, compliance, legal, market and technology risks.
- Conduct impact and likelihood assessments, analyze root causes and evaluate exposure to business and financial performance.
- Maintain the enterprise risk register, develop risk maps and provide early‐warning alerts to relevant stakeholders.
- Assess risk implications for new products, services, processes, systems and strategic initiatives/projects.
2. Risk Strategy Development and Risk Management Tools
- Develop and enhance risk management policies, procedures, standards and guidelines in alignment with the enterprise risk management framework.
- Design and implement risk management tools such as RCSA, KRI, Loss Data Collection, Stress Testing and Scenario Analysis.
- Define and review the company's Risk Appetite and propose appropriate control thresholds for each risk type.
Support business units in implementing preventive and mitigating controls across underwriting, claims, operations and commercial activities.