AGM/GM-OPS Risk

Job Description: <\/b>To embed and operationalize Operational Risk Management across Kshema by driving RCSA, & and BCP readiness, ensuring strong control environment, regulatory compliance, and business resilience.
<\/div>

<\/div>
Core Portfolios<\/b>
<\/b><\/div>

<\/b><\/div>
1. RCSA & Operational Risk Governance<\/b>
<\/div>

<\/div>
\tDrive RCSA implementation across all functions
<\/div>
\tStrengthening risk identification, control effectiveness, and first\-line ownership
<\/div>
\tDesign and execute control testing program (test plans, sampling, evidence, deficiencies) to validate effective control functioning and drive remediation
<\/div>
\tDrive Ops Risk governance cadence (ORC, reporting, reviews)
<\/div>
\tConduct thematic reviews and expand scope to include customer experience & reputation risks.
<\/div>
\tOversee / Consume:
<\/div>
o\tIncident reporting & loss data
<\/div>
o\tRCA and CAPA tracking via Issue Tracker
<\/div>
o\tKRIs and risk dashboards
<\/div>
o\tDefine actionable, action\-oriented KRIs linked to risk appetite/thresholds; monitor breaches and drive timely management actions
<\/div>
o\tFraud Risk Triggers / instances
<\/div>

<\/div>
2. Business Continuity Planning (BCP)<\/b>
<\/div>
\tDesign and implement BCP framework across functions
<\/div>
\tConduct Business Impact Analysis (BIA) and scenario planning
<\/div>
\tLead BCP drills, testing, and incident response readiness
<\/div>
\tDrive training, awareness, and resilience reporting
<\/div>
\tEnsure alignment with IT DR and critical vendor continuity
<\/div>

<\/div>
Value Proposition<\/b>
<\/div>

<\/div>
Acts as the execution arm of Operational Risk, ensuring risk frameworks translate into measurable control strength, regulatory compliance, and business resilience.
<\/div><\/div>

<\/div><\/span>

Requirements<\/h3>
Cross\-Functional Responsibilities<\/b>
<\/div>

<\/div>
\tSupport risk policy and SOP deployment
<\/div>
\tAlign with frameworks like COSO and ISO 31000
<\/div>
\tDeliver risk reporting to CRO/RMC
<\/div>
\tDrive incident, issue, and control governance
<\/div>
\tSupport enterprise risk initiatives (data security, process improvement, CX risk)
<\/div>

<\/div>
Capability Requirements<\/b>
<\/div>

<\/div>
\tStrong knowledge of Operational Risk, IRDAI regulations, and insurance operations
<\/div>
\tAnalytical mindset with data\-driven risk monitoring
<\/div>
\tStrong stakeholder management and governance orientation
<\/div>

<\/div>
Combined Success Metrics<\/b>
<\/div>
\u200b<\/b>
<\/div>
\- RCSA Coverage & Control Effectiveness: % functions covered, improvement in control ratings
<\/div>
\- Risk Events & Issue Management: Reduction in repeat incidents, timely RCA & CAPA closure
<\/div>
\- BCP Readiness: Coverage of critical functions, drill effectiveness, RTO adherence
<\/div>
\- Governance & Reporting: Timeliness and quality of risk reporting to CRO/RMC
<\/div>
\- Control Testing & KRI/Risk Appetite Monitoring: % key controls tested vs plan, deficiency closure rate, number of KRI breaches outside appetite and time to remediate
<\/div>

<\/div><\/span>

Benefits<\/h3>
HR to Update
<\/div>

<\/div><\/span>