Enterprise Risk Management Analyst

JOB PURPOSE

To facilitate the risk management process within Tax Administration Jamaica (TAJ); create and monitor the Enterprise Risk Register and Incident Management database; monitor enterprise risk management issues; assess and report the risks within the organisation and to develop, monitor and coordination of TAJ’s Business Continuity Management process. 

KEY OUTPUTS

• Sensitization and risk assessment sessions conducted with the various business units/functional areas; 
• Organization-wide risk events analysed; 
• Update Enterprise Risk Register from analysis of Sub Enterprise Risk Registers received; 
• Implementation of risk assessment methodologies, models and systems facilitated and monitored 
• Monitors all risks and highlights critical and high risks for attention; 
• Risk response strategies (i.e. mitigation plans) analysed and implementation monitored; 
• Business continuity management activities assessed, documented and implementation monitored; 
• Reports prepared and submitted. 

KEY RESPONSIBILITY AREAS

Technical and Professional Duties: 

• Contributes to the development of Enterprise Risk Management processes, tools and systems used to identify, analyse, evaluate and treat business areas’ risks; 
• Facilitates and manages implementation of the Enterprise Risk Management processes, tools and systems; 
• Contributes to the development reviews and updates of Enterprise Risk Management documents, (Framework, Enterprise Risk Management Plan, Risk Appetite and Tolerance Levels Recommendations Document) and other risk management policies, procedures and plans as required;
• Supports the Director, Enterprise Risk Management (ERM) in the effective and efficient management of risks across the organisation; 
• Performs analyses of the organisation’s risks to identify trends and gaps; guides and validates mitigation plans and strategies; 
• Coordinates and conducts risk workshops/sensitization sessions where enterprise gaps are identified; 
• Monitors adherence to risk standards and procedures within the business units & functional areas; 
• Promotes the embedment and maintenance of a risk management philosophy and culture within TAJ; 
• Monitors all risks, with focuses on major and critical risks for action; 
• Communicates with risks owners to facilitate the monitoring and reporting processes; 
• Maintains knowledge of ERM and technology industry trends, and guides TAJ’s ERM programme in order to meets its goals and objectives; 
• Researches, proposes and enhances effective risk methods, informed by best practices; 
• Assist the Director in chairing Risk Management Groups established to support risk management initiatives and business continuity efforts; 
• Develops, reviews and updates the Business Continuity Management Plan (BCMP); 
• Develops the Business Impact Analysis plan to support business continuity
• Reviews Business Continuity Sub-plans for conformity with the BCMP;
• Develops and evaluates testing schedules for the BCMP and all sub-plans; 
• Develops the Command Centre Plan and acts as secretariat for the Command Centre 
• Guides the Command Centre in the event of wide spread disasters affecting the organization 
• Reviews and analyses findings from after-action reports; 
• Receives, analyses, maintains database and reports on incidents occurring across the organization; 
• Supports the identification and management of risks within the organization and by extension the respective area of work; 
• Updates and monitors the Incident Management database 
• Performs other related duties assigned by the Director, Enterprise Risk Management. 

PERFORMANCE STANDARDS

This job is satisfactorily performed when: 

• Risks are appropriately assessed with severity ratings in accordance with established standards and the agreed timeframe; 
• The Incident Database and Risk Registers are developed and maintained according to established standards and within the stipulated time; 
• Organisation risk and risk events are carefully analysed in accordance with stipulated procedures; 
• Appropriate and effective risk assessment methodologies, models and systems are implemented within the agreed timeframe; 
• Major and critical risks are continuously monitored and reported on; 
• Appropriate risk response strategies (mitigation plans) are developed and implemented; 
• Reports prepared and submitted in keeping with established standard and agreed timelines. 

AUTHORITY TO:

• Recommend changes to policies and procedures; 
• Access the Administration’s risk related information; 
• Maintain the Risk Registers; 
• Maintain Incident Database;

REQUIRED COMPETENCIES

Specific Knowledge 

• Excellent knowledge of the operations and functions of Tax Administration Jamaica; 
• Excellent knowledge of risk management processes including understanding of risk management model, risk management analysis and risk mitigation; 
• Excellent knowledge of conducting data analysis and research;
• Comprehensive knowledge of computer systems and the relevant applications 

Required Skills and Specialised Techniques 

• Excellent analytical, planning and organising skills 
• Excellent decision-making, negotiating and problem solving skills
• Excellent oral and written communication and presentation skills,
• Excellent team & interpersonal skills; 

Qualification and Experience 

• BSc in Business Administration or the equivalent qualification;
• Specialized training in Risk Management; 
• Four (4) years related work experience. 

WORKING CONDITIONS

• Normal office environment; 
• Travel (30-40%).