Risk and Compliance Specialist

Job Title Risk and Compliance Specialist

Location City of Cape Town, South Africa

Job Type Permanent

Grade C

Status Active

Job Description

Purpose of the Role

Specialist supports the Group's enterprise risk management (ERM) and compliance oversight

model. The role facilitates Group-wide risk assessments and registers, monitors the legislative and regulatory landscape, coordinates combined assurance, and drives a culture of compliance across the company's African, Namibian and US operations.

Key Responsibilities:

Risk management:

• Support the annual review and update of the ERM Policy, Framework and Compliance Policy and Framework for RiskCom approval, and help ensure they are consistently followed.

• Facilitate divisional and functional risk assessments, monitor the implementation and effectiveness of mitigation actions and KRIs, prepare risk reporting for governance forums, and support the continuous improvement and maturity of the company's Enterprise Risk Management framework.

• Review and amend risk registers and mitigation plans and monitor the applicable risk landscape and context changes (PESTLE).

• Track the completion of risk actions and report on implementation progress.

• Own the data quality and governance of the risk registers --- including the

consistency, completeness and accuracy of risk descriptions, ratings and mitigation status

• -- in addition to facilitating its update.

• Identify emerging risks arising from legislative impacts, regulatory developments and

PESTLE analysis, and incorporate relevant findings into risk registers, mitigation plans and reporting.

• Provide guidance and training to risk owners on risk management methodologies and requirements.

• Support with updating of and enhancements to the Risk Management tools as implemented from time to time -- including rolling-out any training where required.

Compliance management:

• Monitor the legislative and regulatory landscape for changes and assess their implications for the Group.

• Support divisions and functions in assessing implications and developing action plans and monitor closure of new legislative requirements.

• Act as convenor of the Compliance Forum and develop and implement the annual compliance and risk training and awareness plan (SRC policies, online compliance training).

• Compile input into the quarterly Risk and Compliance Board reports (legislative updates, Compliance Forum feedback, health and safety incidents, and legislative non-conformances).

• Promote a culture of compliance through awareness campaigns, communications and targeted training initiatives. Develop and distribute regular compliance updates and guidance material on emerging legislative and regulatory developments.

• Coordinate the review, update and implementation of compliance-related policies, standards and procedures to ensure alignment with regulatory requirements and leading practice.

• Investigate incidents and instances of non-compliance with applicable legislation, policies and procedures.

• Maintain the Group legislative universe and compliance obligations register, coordinate compliance risk assessments and monitoring activities, and track remediation actions arising from compliance reviews, investigations and regulatory changes.

Assurance and risk-control coordination:

• Support the drafting of the Combined Assurance Plan (CAP) and evaluate the effectiveness of the CAP quarterly.

• Complete second-level compliance assurance (i.e. compliance with policies and standards).

• Track the completion of property risk recommendations arising from underwriting surveys.

Business continuity planning (BCP)

• Responsible for amending, updating, training and scenario planning of the Group's BCP.

• Monitor the readiness and applicability of the Divisional BCP.

• Develop and maintain the Group wide BCP standards and management system.

Minimum Qualifications C Skills required

• A relevant bachelor's degree in risk management, Law, Commerce, Internal Auditing or a related field.

• A postgraduate qualification or professional certification in risk or compliance management (e.g. IRMSA, Compliance Institute of South Africa, or equivalent) is advantageous.

• 3--5 years' experience in enterprise risk management and/or regulatory compliance, ideally within a JSE-listed or similarly governed organisation.

• Demonstrated experience facilitating risk assessments, maintaining risk registers, and supporting combined assurance processes.

Behavioural Skills and Competencies

• Strong analytical skills, with the ability to apply structured frameworks such as PESTLE to identify emerging and evolving risks.

• Sound understanding of the three-lines-of-defence model and combined assurance principles.

• Excellent facilitation and stakeholder-engagement skills across Group and divisional teams.

• Strong written and verbal communication skills for board- and committee-level reporting.

• High attention to detail, sound judgement, and the ability to manage multiple concurrent workstreams and deadlines.

• Working knowledge of a GRC or enterprise risk management system/tool for risk register maintenance, data quality management and reporting.

• Ability to interpret and apply legislation to real-world business scenarios.