Manager, Risk

Work that powers communities. Who We Are Singapore Pools (SPPL) was established by the Singapore government on 23 May 1968 to provide safe and trusted betting to counter illegal gambling. As a not-for-profit organisation, it makes contributions to the Tote Board to fund a wide range of causes in social service, community development, sports, arts, education and health sectors. Since 2004, over $5 billion have been channelled to the Tote Board. In addition, Singapore Pools also contributes about $2 billion annually to the Government in the form of taxes and duties. Its responsible gaming practices have been awarded the highest level of certification (Level 4) by the World Lottery Association’s Responsible Gaming Framework since 2012. Since inception, Singapore Pools’ staff have a long-standing commitment to doing good and giving back to those in need. Staff volunteers support activities held all year round, from helping disadvantaged children, youth-at-risk, underprivileged families, and elderly, to conserving the environment. Job Purpose This role will implement and maintain Enterprise Risk Management and Business Continuity Management programmes, ISO/WLA-SCS/SS714 certifications so that the Company remain as an effective legal gambling operator with strong corporate governance, is resilient with effective responses in event of crisis, and has effective processes to achieve ISO/WLA-SCS/SS714 compliance.

What You'll Do
• ISO9001/ISO27001/WLA-SCS/SS714 certifications:
• Coordinate overall certification audit programme to maintain the certifications for the organisation.
• Conduct gap analysis for new/revised certification standards and work with business units to close any identified gaps.
• Review of policies and procedures to ensure they addressed the clauses in the ISO / WLA-SCS /SS714 standards.
• Conduct internal audits, training/awareness for staff.
• Work with external certification body for external audits and maintenance of certifications.
• Business Continuity Management:
• Establish, maintain and continually improve the implementation of the BCM framework and BCP related documents.
• To provide Secretariat support for Senior Management during a crisis.
• To serve as Secretariat to a weekly Operations Committee meeting, where incidents and operational matters are discussed.
• Provide guidance to business units to develop and maintain department Business Continuity Plans and to conduct regular Business Impact Analysis (BIA).
• Establish and maintain processes and practices to ensure that the enterprise-wide business continuity programme remains current and aligns with industry standards and best practices as appropriate.
• Develop and facilitate exercises/tests and post-test reporting.
• Manage and facilitate training/awareness initiatives and kept abreast of the BCM practices in the organisation.
• Enterprise Risk Management
• Responsible for regular reporting (3 times a year) to the Audit and Risk Committee (ARC) of the Board of Directors.
• Constantly monitors risk profile to ensure that new or emerging risks are captured and mitigated.
• Coordinate and conduct enterprise-wide communications, training programmes, and surveys. Who You Are
• Degree-qualified in Accountancy, Engineering, or related fields, with 8 to 10 years of work experience in at least two of the following areas:
• Enterprise Risk Management
• Business Continuity Management
• Certification work (especially International Standard (ISO9001, ISO27001), World Lottery Association Security Control Standard (WLA-SCS), and SS714 (Data Protection Trustmark).
• Prior Risk and Compliance experience, either with a Big Four consulting firm, or in an in-house capacity, would be preferred.
• A strong communicator with excellent interpersonal and organizational skills.
• Preferred

Qualifications:
• ISO9001, ISO27001 auditor/lead auditor and Practitioner Certificate in Personal Data Protection (or other equivalent such certifications).
• Business Continuity Management certification, e.g. CBCI (Certificate of the Business Continuity Institute); CBCP (Certified Business Continuity Professional) by DRI International; ISO 22301 Lead Implementer / Lead Auditor certification.
• Enterprise Risk Management certification e.g. IRM International Certificate in Enterprise Risk Management; RIMS-CRMP (Certified Risk Management Professional);
• Technology Risk Management, e.g. CISM (Certified Information Security Manager) by ISACA; CISA (Certified Information Systems Auditor) by ISACA; CRISC (Certified in Risk and Information Systems Control) by ISACA.

What We Offer
• Comprehensive total rewards package
• Health & wellness benefits
• Continuous learning and upskilling opportunities
• Volunteerism and community initiatives Only shortlisted candidates will be contacted for further career conversations.