Specialist: Enterprise Risk Management (x2) at The South African Revenue Service (SARS)

About the Position

• SARS is looking for a highly skilled, results driven, self-directed specialist with extensive enterprise risk management knowledge and experience, who will contribute towards SARS’ higher purpose and service orientation. S/he will provide highly specialised functional knowledge and know-how in order to enable business to translate the SARS vision and strategic intent into a world-class taxpayer service and delivery operation through sound risk management and risk trend analysis practices and risk reporting, in order to assist the organization in pro-actively managing and mitigating risks within various business areas in line with industry benchmark and best practices. S/he will be part of a dynamic and innovative team that seeks to implement a progressive risk culture at SARS facilitating the implementation of risk management practices and principles using the ISO 31000 framework as the base methodology. S/he will work with SARS ERM Team in defining a risk practice that operates and promotes modern thinking in Risk management, utilizing King IV Report’s Combined Assurance methodology on the 5 Lines of Assurance model.  S/he will be responsible for the design and implementation of SARS’ Enterprise Risk Management strategy, policies, procedures and practices in support of SARS strategic objectives and enhance SARS’s ability to manage, mitigate and eliminate risks as they arise.
• The ideal person should be a seasoned thought leader with extensive knowledge of Risk Management in a large Multi Divisional Corporate that liaises with both Government & Private Sector Stakeholder.

Job Purpose

• The main purpose of the role is to ensure that SARS operates within its set risk appetite obligations in order to avert adverse impact and maximise opportunities within the entire organisation in line with the SARS Vision 2024 and Strategic Intent. 

Education and Experience

Minimum Qualification & Experience Required

• Relevant Bachelor's Degree / Advanced Diploma (NQF 7) AND 8-10 years' experience in a Governance, Risk and Compliance (GRC) environment with practical experience in Enterprise Risk Management (ERM), or similar environment, of which 3-4 years ideally at Enterprise Risk Management (ERM) middle management level. 
• Senior Certificate (NQF 4) AND 15 year’s related experience in a Governance, Risk and Compliance (GRC) environment with practical experience in Enterprise Risk Management (ERM), or similar environment, of which 3-5 years ideally at Enterprise Risk Management (ERM) middle management level. 

Job Outputs:

Process

Develop and implement risk management policies, framework and guidelines for the Enterprise Risk Management function, in line with best risk management practices and principles to support SARS strategic objectives:

• Participate in the development of the risk management framework, policy and guidelines and other risk artefacts;
• Implement the risk management business plan
• Support the establishment of the risk management philosophy and culture in the organization:
• Advocate and promote risk management in the organisation
• Contribute to the assessment of the Risk maturity
• Provide training and coaching on risk management to first line
• Conduct engagement and awareness sessions to facilitate risk management buy-in and integration of principles in specific business processes.

Continuous monitoring of the risk environment as follows:

• Collect information on indicators of risks.
• Detect changes in the risk environment (internal and external context).
• Advise the business on maintenance of data on risk management information repository (BarnOwl).
• Provide support in the undertaking of studies, surveys and analysis for identifying risks to establish the internal and external organizational context (OECD).

Facilitate and advise on the risk management assessment process as follows:

• Facilitate the identification of risks
• Analysis of risks
• Risk evaluation
• Risk response
• Compile risk profile (assurance of the risk registers)
• Compile ad hoc reports as required and facilitating risk workshops directed at solving specific problems by applying appropriate tools and techniques.

Monitor and review the identified risk response activities as follows:

• Monitoring the implementation of the progress of activities to address risks as agreed upon
• Update the revised risk response activities
• Review the risk registers from a second line perspective
• Periodic review of the implementation of risk management at line 1
• Preform deep dives into specific areas of the business

Risk Reporting:

• Developing and implementing risk recording and reporting processes and standards aligned to the governance standards followed by SARS and the expectations of the governing and oversight bodies (e.g. Commissioner, Audit and Risk Committee). 
• Consolidate sub-cluster risk registers into excel for reporting
• Prepare SARS risk reports for  both internal and external stakeholders

Governance

• Advanced knowledge of Public Finance Management Act (PFMA), and Principle 11 of the King IV Report on Corporate Governance for South Africa 2016 (King IV).
• Keep abreast with, assess and influence legislative and business requirements and changes to ensure that decisions are based on relevant specific insight and requirements. 
• Contribute to and/or align governance and risk policies for specific enterprise level entities and committees.

People

• Engagement with internal and external stakeholders to ensure effective management of interdependencies.
• Network and build relationships to enable the effective
• Resolution of a difficult conflict
• Integrate new knowledge and transfer skills attained through formal and informal learning opportunities in the execution of the job
• Provide specialist know-how, support, advice and practice thought leadership in area of expertise.

Finance

• Implement and monitor financial control, management of costs and corporate governance in area of specialisation. 

Client

• Ensure strategic representation of SARS and promote the enterprise with public service leaders and national, regional stakeholders.
• Define and influence relationships and service level agreements made with internal and external stakeholders.