Enterprise Risk Specialist

BIOVAC is one of the leading sterile vaccine manufacturers rooted in Africa with our core purpose being to protect life. We are looking to hire a dynamic passionate confident proactive and meticulous Enterprise Risk Specialist to join a goal-oriented team

QUALIFICATIONS NEEDED:

Required:

• Bachelors degree in Risk Management Finance Business Administration Accounting or related discipline.
• Formal training or certification in Enterprise Risk Management (ERM) or Corporate Governance principles.
• Strong computer literacy including proficiency in MS Excel Word PowerPoint and exposure to risk reporting tools or systems (e.g. Power BI or GRC platforms).

Preferred:

• Postgraduate diploma or honours degree in Risk Management.
• Professional membership or certification with the Institute of Risk Management South Africa (IRMSA) or equivalent.
• Short courses in ISO 31000 COSO ERM or King IV/V corporate governance frameworks

Experience needed to deliver the role seamlessly:

• Minimum 4 -6 years experience in a risk management or related role within a corporate regulated or project-based environment.
• Practical knowledge of risk identification assessment mitigation and monitoring processes.
• Demonstrated experience maintaining and analysing risk registers dashboards and reporting metrics.
• Exposure to corporate governance and assurance functions (e.g. Internal Audit ESG or Compliance).
• Proficiency in preparing risk reports committee inputs and management dashboards.
• Understanding of risk appetite frameworks KRIs and risk control self-assessment methodologies.

KEY DUTIES & RESPONSIBILITIES OF THE ROLE:

Core Technical Delivery:

Business Management

• Support the Risk & Compliance Manager in implementing and maintaining the ERM framework and related tools.
• Coordinate risk assessment cycles facilitate workshops and ensure risk registers are current and comprehensive.
• Ensure proper documentation version control and data integrity for all risk and assurance artefacts.
• Track monitor and follow up on risk mitigation plans ensuring accountability for action completion.

• Prepare risk dashboards reports and committee inputs for review by management and Board Committees.

• Liaise with risk owners and business units to ensure alignment between operational and enterprise risk perspectives.
• Support awareness and training sessions on risk management principles and processes.
• Assist in integrating risk management with business continuity audit and ESG functions.
• Coordinate enterprise and project-level risk assessments ensuring complete documentation and alignment to corporate risk taxonomy.
• Support implementation of Business Continuity and Resilience plans ensuring integration with the ERM framework.
• Maintain up-to-date risk and continuity registers ensuring mitigation actions and continuity measures are tracked.
• Facilitate and document Business Impact Analyses (BIAs) and coordinate annual BCM testing and plan reviews.
• Track key risk and continuity indicators (KRIs/KCIs) and escalate emerging threats.
• Prepare consolidated risk and continuity reports for management and Board Committees.
• Promote risk and continuity awareness across business units through communication and training.
• Liaise with project teams and functional leads to embed risk and BCM practices in strategic and operational planning

Risk Assessment & Analysis

• Conduct and document risk identification and assessment workshops with business units.
• Evaluate risks for likelihood impact and control effectiveness ensuring accuracy and comparability.
• Identify emerging risks and track external factors that may affect organizational risk exposure.
• Support scenario analyses and stress-testing as part of risk reviews.

Enterprise and Project Risk Management

• Consolidate and prepare risk registers dashboards and heat maps.
• Maintain risk data in line with approved taxonomies and categories.
• Provide risk insights to management highlighting key changes and trends.
• Support preparation of inputs for Finance & Risk Committee reports and Board packs.
• Maintain and update the Enterprise Risk Register and project-level risk registers.
• Conduct risk workshops to assess likelihood impact and control effectiveness.
• Identify emerging and strategic risks related to new projects partnerships or expansions.
• Track implementation of risk mitigation plans and provide quarterly progress updates.
• Support development of risk appetite statements and key risk indicators (KRIs).

Risk Integration & Assurance

• Liaise with Internal Audit and ESG functions to align on combined assurance processes.
• Support risk-based compliance and policy reviews ensuring consistency across business areas.
• Assist in developing and maintaining risk appetite statements and KRIs.
• Participate in risk-related projects and governance improvement initiatives.
• Liaise with Internal Audit ESG and Compliance to align assurance and continuity reporting.
• Ensure that risk and continuity insights inform governance reviews and performance reporting.
• Contribute to continuous improvement of ERM and BCM processes and documentation.

Business Continuity Management (BCM)

• Maintain and update the organisations BCM framework ensuring compliance with ISO 22301.
• Conduct and document Business Impact Analyses (BIA) across departments.
• Coordinate the development testing and updating of Business Continuity Plans (BCPs).
• Monitor the implementation of continuity and recovery actions following incidents or disruptions.
• Assist in preparing continuity-related reports and evidence for audits or external assurance.

Insurance Risk Support

• Liaise with the Finance Manager and brokers/insurers to align insurance coverage with enterprise and project risk profiles.
• Maintain a clear register of insurable risks and update it based on changes to operations projects and asset portfolios.
• Identify and communicate risk exposures or control gaps that may require insurance review or adjustment.
• Support the review of insurance schedules ensuring cover limits deductibles and exclusions are appropriate for business activities.
• Contribute to post-incident reviews to ensure lessons learned are captured in both risk and insurance processes.
• Provide risk data and analysis to support insurance renewals claims submissions or audit queries
• Collaborate with project teams to assess construction and operational insurance requirements for new developments.

Application Deadline: 12 December 2025

If you do not receive a response from us within three weeks after closing date please understand that your application was not successful.

Disclaimer:

Dear Applicant we appreciate your interest in joining our organization. It is imperative for us that you understand how we handle your information. We are committed to ensuring the security and confidentiality of the information you provide. Your personal details will be collected for the sole purpose of the application process and will be used strictly for that purpose. By applying you acknowledge and consent to the collection use and protection of your personal information in accordance with our privacy policy. If you have any inquiries or concerns our Human Capital department is available to provide clarification. We look forward to reviewing your application.

For detailed information on data handling please review our privacy notice: