Governance, Risk and Compliance (GRC) Manager 21 views

Job Description

The Governance, Risk and Compliance (GRC) Manager is responsible for developing, implementing and managing the organisation’s governance, risk management, control and compliance strategies. This role ensures the organisation adheres to legal, regulatory and industry standards while aligning with corporate policies and objectives. The GRC Manager will work closely with various departments to promote a culture of compliance and risk awareness.

Key Accountabilities 

Governance: 

• Develop and implement governance frameworks, policies, and procedures
• Ensure corporate governance practices are adhered to and are in line with corporate and regulatory requirements
• Oversee the creation and maintenance of governance documentation

• Provide guidance on governance-related issues to senior management and the board.

Risk Management: 

• Identify, assess and prioritise risks to the organisation
• Develop and implement risk management strategies and processes

• Conduct regular risk assessments and audits to ensure effective risk management

• Monitor and report on the status of risk management activities to senior management.

Controls: 

• Develop, implement and maintain the first line controls framework and testing methodology to ensure adherence to corporate requirements

• Review and approve the design and operational effectiveness of internal controls

• Review and approved control testing procedures, results and findings

Compliance: 

• Develop, implement and maintain compliance programs to ensure adherence to relevant corporate rules, laws and regulations

• Monitor regulatory changes and update compliance programs as necessary

• Lead and manage internal and external compliance audits and reviews.

Policy Development: 

• Develop and maintain GRC policies and procedures

• Ensure policies are communicated and enforced throughout the organisation

• Regularly review and update policies to reflect changes in regulations or organisational needs.

Reporting and Analysis: 

• Prepare regular reports on GRC activities for senior management and the board

• Analyse GRC metrics and provide insights for continuous improvement

• Develop dashboards and reporting tools to monitor GRC performance.

Team Leadership: 

• Lead and manage the GRC team (Direct/Indirect), including hiring, training and performance management

• Foster a culture of compliance and risk awareness within the team and across the organisation

• Collaborate with other departments to ensure integrated and coordinated GRC efforts.

Skills and Experience 

Technical Skills: 

• Strong understanding of regulatory requirements and industry standards

• Excellent analytical and problem-solving skills

• Strong communication and interpersonal skills

• Ability to work collaboratively with cross-functional teams

• Proficiency in GRC software and tools

• Project management skills are a plus.

Experience: 

• Substantial experience in governance, risk management and compliance roles

• Proven experience in developing and implementing GRC frameworks and strategies

• Experience in leading and managing a team (Direct/Indirect)

Education: 

• Bachelor’s degree in Business Administration, Finance, Law or a related field

• Professional certifications such as Certified Risk and Compliance Management Professional (CRCMP), Certified Information Systems Auditor (CISA), or similar are highly desirable.

Personal Attributes: 

• High ethical standards and integrity

• Detail-oriented and organised

• Ability to work under pressure and meet deadlines

• Proactive and self-motivated

• Strong leadership qualities.