Assistant Manager – Governance, Risk & Compliance (GRC)

Overview

The Assistant Manager for Governance, Risk & Compliance (GRC) is responsible for overseeing the implementation and management of the organization's GRC activities under the guidance of the Legal & Compliance Senior Manager. This role ensures the establishment and upkeep of governance frameworks, monitors compliance both internally and with regulations, coordinates enterprise-wide risk management, and tracks audit and corrective measures. Collaborating across various departments, the role promotes consistent policy enforcement, effective control mechanisms, timely mitigation of risks, and accurate GRC reporting.

Key Responsibilities

• Develop and regularly update the corporate governance framework to align with approved standards and organizational requirements.
• Oversee the Delegation of Authority (DoA), managing versioning, stakeholder feedback, and compliance with authorized limits.
• Maintain Board and committee charters along with other governance tools, facilitating amendments and approval processes.
• Keep thorough governance records including conflict-of-interest and related-party transaction registers, coordinating disclosures and risk mitigation as needed.
• Support governance audits and ensure enforcement of approved governance policies and controls.
• Implement and sustain the company's compliance framework, managing policies, records, and monitoring activities.
• Track regulatory changes, evaluate their impact on policies and operations, and update controls accordingly.
• Coordinate due diligence processes such as counterparty checks and Know Your Customer (KYC), maintaining comprehensive documentation.
• Assist in maintaining the Code of Conduct, data protection standards, supplier compliance rules, and related documents.
• Manage compliance investigations, preparing summaries with recommendations and reporting serious issues to senior management.
• Handle external compliance verifications requested by stakeholders such as clients, shareholders, and auditors.
• Maintain and update the enterprise risk management framework and corporate risk register.
• Facilitate regular risk assessments with business units, assessing likelihood, impact, controls, and residual risks.
• Collaborate with risk owners to define mitigation measures, monitor progress, and escalate persistent or significant risks.
• Support setting and monitoring risk appetite, tolerance levels, and key risk indicators as applicable.
• Produce risk and GRC reports and dashboards for management review and decision-making support.
• Coordinate with Internal Audit and assurance providers on related reviews.
• Manage a consolidated register for findings from audits, compliance checks, governance, and risks, tracking remediation activities.
• Follow up on corrective actions with responsible parties and escalate unresolved issues or significant delays.
• Prepare regular GRC reports and documentation for the Legal & Compliance Senior Manager and governance bodies.
• Ensure precise maintenance of confidential records, registers, and supportive materials related to GRC activities.

Qualifications and Experience

• Bachelor’s degree in Law, Business Administration, Risk Management, Compliance, Finance, or a related discipline is mandatory.
• Professional certifications in governance, risk, compliance, internal audit, or similar fields are desirable.
• 4 to 6 years of relevant experience in governance, risk, compliance, internal audit, or related GRC functions.
• Hands-on experience managing governance frameworks, compliance and risk registers, policies, and monitoring processes.
• Proven ability to coordinate risk assessments, compliance checks, audit resolutions, and corrective action plans across departments.
• Competence in preparing management reports, dashboards, and formal governance materials.
• Capability to operate independently on routine GRC matters while escalating significant issues appropriately.
• Experience engaging with cross-functional teams and handling sensitive, confidential information responsibly.