Sr. Risk Management (GRC & IT Risk) - Fixed term contract 2 years

About the Role

Senior Risk Management (GRC & IT Risk) at SCB TechX responsible for GRC implementation (PMO / GRC Champion, Process Owner / Data Owner) across group‑wide environment and supporting broader risk oversight and management activities.

Responsibilities

• Act as the primary liaison with Group GRC COE and ensure alignment with group standards; oversee data governance, configuration integrity, and cross‑entity consistency; monitor platform adoption, usage, and data quality; drive issue resolution; consolidate feedback and support continuous improvement and BAU embedding.
• Own end‑to‑end processes across 7 GRC modules (Master, Incident, ERM, ORM, ITRM, TPRM, BCM); define entity‑specific requirements, standards, and access controls; ensure data accuracy through validation, cleansing, and integration oversight; lead UAT, provide go‑live sign‑off, and drive ongoing performance and improvement.
• Support broader risk oversight and management activities including ongoing risk monitoring to ensure alignment with internal policies and regulatory requirements; oversight of risk management practices and execution across key functions; identification of emerging risks with timely mitigation and escalation; management reporting and provision of risk insights to support decision‑making.

Qualifications

• At least 5–7 years work experience with enterprise risk management, GRC implementation, and risk governance within a group‑wide environment.
• Proven track record in leading end‑to‑end GRC platform implementation as PMO, Process Owner, and Data Owner, ensuring alignment with Group standards, data governance, and cross‑entity consistency.
• Strong expertise across multiple GRC domains including ERM, ORM, ITRM, TPRM, BCM, incident management, and master data, with hands‑on experience in UAT, go‑live execution, BAU embedding, and continuous improvement.
• Experience in broader risk oversight activities including ongoing risk monitoring, emerging risk identification, regulatory alignment, and senior management reporting to support informed decision‑making.
• Understanding of core risk management principles and enterprise risk management frameworks, GRC concepts and governance structures across group‑wide environments, and familiarity with risk appetite, risk limits, and escalation mechanisms.
• Basic understanding of regulatory expectations related to risk management and governance and ability to interpret risk information and support effective risk reporting and decision‑making.

Additional Information

• Fixed‑term contract (2 years).
• Work arrangement: Onsite.