Initial Program Development Responsibilities (First 12–24 Months)
· Build and implement the Enterprise Risk Management Framework.
· Develop the ERM Charter, Risk Appetite Statement, Risk Assessment Methodology, RCSA Methodology, and Risk Reporting Standards.
· Establish the enterprise risk taxonomy and Enterprise Risk Register.
· Develop the enterprise controls inventory and control ownership model.
· Design and implement the Risk and Control Self-Assessment (RCSA) program.
· Develop Key Risk Indicators (KRIs) and executive dashboards.
· Establish governance processes for the Executive Risk Committee.
· Develop Board-level enterprise risk reporting.
· Evaluate Governance, Risk, and Compliance (GRC) technology.
· Embed risk management into strategic planning and operational decision-making.
· Facilitate enterprise-wide risk assessments.
· Monitor enterprise risks and mitigation plans.
· Maintain the enterprise controls inventory and monitor control effectiveness.
· Support third-party risk management and operational resilience.
· Coordinate business continuity planning activities.
· Prepare quarterly executive and Board risk reports.
· Provide ERM education and coaching.
· Continuously improve the ERM program.