The Director Risk Management/Chief Risk Officer is responsible for creating ZIMCHE’s risk strategy and providing oversight and leadership in risk matters. The incumbent influences and informs the governing body and decision makers on risk management strategies. He or she influences the direction and profile of risk management and the profession (Source: Institute of Risk Management Professional Standards in Risk Management)

Purpose of the Job: 

1. The Director Risk Management/Chief Risk Officer champions the execution of the risk management framework and processes essential for the ZIMCHE in achieving its business objectives. Ideally, the DRM/CRO is accountable for enabling the efficient and effective governance of all significant risks, and the related opportunities, for the ZIMCHE.
2. As a key member of the senior management team, the DRM/CRO is a peer and adviser to the rest of senior management who can translate risk management into the terms that matter to the key stakeholders. The Director Risk Management/Chief Risk Officer’s role encompasses the leadership and oversight of the Risk and Compliance Management Unit, including the following corporate functions: enterprise risk management, internal controls, information security, risk mitigation and risk transfer.

KEY RESPONSIBILITIES

1. To prepare and develop the ERM (Enterprise Resources Management) framework as an overall risk governance and internal controls for approval by the Risk Management Committee and the Council. This includes considering the state of maturity of the ZIMCHE’s risk management and tailored to the specific circumstances of the Institution;
2. To discuss with the CEO (CHIEF EXECUTIVE OFFICER) and Management on the institution’s major risk exposures and review the steps or action taken to monitor and control such exposures, including ZIMCHE’s risk assessment and respective internal Standards Operating Procedures (“SOP”);
3. Keep the ZIMCHE Council and Management informed of the latest development in international standards and practices on Risk Management in general and specific to ZIMCHE.
4. To ensure the ZIMCHE’s compliance to statutory requirements, internal policies, guidelines, procedures, laws, and regulations which could have a significant impact on operations and to suggest policies and procedures where required;
5. To provide internal consulting and advisory services as part of the risk management scope and in response to a management request. These engagements can be both formal and/or informal if it does not impair the independence and objectivity of risk management functions and its officers;
6. To ensure that the risk management processes are adequate and effective and comply with internationally accepted risk management standards;
7. To ensure standardized and integrated reporting on all risk management activities and risk exposure to the Risk Management Committee and the ZIMCHE Council.
8. Provide technical advice and support to the ZIMCHE Council and Management in improving and advancing the Risk Management system of the University as the legal and regulatory environment, standards and/or the business focus of the University change.