Enterprise Risk Manager

About Us

Moder

Equipped with diverse tools, platforms, solutions, and services we strive to work towards our mission to positively impact the financial health of companies by powering in-house processes using top talent, workflow best practices, and progressive technology.

Link - https://www.gomoder.com/about-moder

About the Risk Management Department

regulatory requirements, investor guidelines, and internal policies

About the Role

Risk Manager

Key Responsibilities

1) Risk Strategy & Governance

• Define and maintain the

  Enterprise Risk Management (ERM) framework

  covering IT and Credit Risk.
• Lead

  Risk & Control Self-Assessments (RCSA)

  and oversee risk taxonomy, materiality thresholds, and risk appetite statements.
• Chair/drive

  risk committees

  (e.g., Technology Risk Council, Credit Risk Committee); set agendas and action trackers.
• Establish

  policies, standards, and procedures

  (e.g., Information Security Policy, Credit Policy, Underwriting Standards).

2) IT Risk Management

• Oversee

  IT risk assessments

  across applications, infrastructure, cloud, data, and cybersecurity.
• Implement and monitor

  controls

  for access management, change management, SDLC, vendor risk, incident management, DR/BCP.
• Coordinate

  program/control testing

  (e.g., vulnerability management, patch compliance, backup/restoration testing).
• Track and remediate

  technology risk issues

  ; perform root-cause analysis for incidents and near-misses.

3) Credit Risk Management

• Own

  credit risk frameworks

  : underwriting standards, risk grading, concentration/sector limits, and portfolio monitoring.
• Validate models/scorecards (in partnership with Credit/Analytics) and monitor

  PD/LGD/EAD

  and override rates.
• Drive

  portfolio analytics

  : delinquency trends, NPA/NPL movement, roll rates, vintage analysis, and loss forecasting.
• Oversee

  credit approvals

  governance, exception management, and post-disbursement reviews.

4) Stakeholder Leadership

• Lead and mentor a team of

  risk analysts/testers

  ; build domain capabilities and succession plans.
• Partner with

  Business, Credit, IT, InfoSec, Compliance, Legal, Internal Audit

  for risk remediation and continuous improvement.

Required Skills & Experience

• 1012+ years

  in Risk Management with leadership exposure to

  IT Risk

  and

  Credit Risk

  (banking/NBFC/fintech/enterprise).
• Strong command of

  risk frameworks

  (e.g., ERM, COSO, Three Lines of Defense); for IT risk:

  NIST/ISO 27001/PCI/FFIEC

  ; for credit risk:

  policy governance, portfolio monitoring, provisioning

  .
• Proven experience in

  program/control testing

  ,

  KPI/KRI validation

  , and

  risk reporting

  to senior leadership/Boards.
• Solid analytical skills (risk analytics, trend detection, root-cause analysis); proficiency with dashboards (e.g., Power BI/Tableau) is a plus.
• Excellent stakeholder management, communication, and

  team leadership

  .
• Must possess strong people Management Experience