Location: UK, Gatwick
Organization: Civil Aviation Authority
Reporting into the CAA Enterprise Senior Risk Manager, the role provides an opportunity to work across the entire organization and understand and support the full range of duties the CAA performs, and the risks the organization manages, to run its functions effectively, deliver its strategy, and protect consumers and the public.
The CAA Enterprise Risk Manager will be responsible for working within the established risk framework to help the organization to identify, assess, and mitigate risks across the CAA to protect its value and strategic goals. They will help to implement and embed the CAA’s risk framework and contribute to reporting key threats to leadership (guided by the CAA Enterprise Risk Senior Manager.
The role will include contributing to and coordinating the CAA’s corporate risk reporting process to the executive committee, audit committee, and the board – and helping the CAA’s first line of defence to apply its ERMF consistently. A particular focus of the role will be supporting the CAA Enterprise Risk Senior Manager and the Head of Enterprise Risk to develop the CAA’s ERMF further in line with best practice and the Orange Book.
Some travel between CAA offices (Gatwick or London) may be required.
Job role:
- Enterprise risk management framework implementation – designing, owning, and embedding the framework, policies, and processes for identifying and responding to risks.
- Risk identification and assessment – evaluating risks related to strategy, operations, finance, and reputation, including consideration of cyber security and regulatory compliance.
- Corporate risk reporting – support the Senior Risk Manager and Head of Enterprise Risk, including corporate risk reporting/presentations to the executive committee, audit committee, and board (and other forums as required).
- Corporate risk improvements – contribute to the implementation of specific work to further develop and improve the CAA’s enterprise risk management arrangements, including awareness/training, key risk indicators, risk policies, and risk appetite.
- Business risk partnering – act as Business Risk Partner for one or more CAA business areas.
- Internal engagement – engage with colleagues across the CAA to support and facilitate active risk management. Also engage with/help shape other corporate initiatives, such as integrated planning, horizon scanning, etc.
- External engagement and reporting – work with external organizations as required to understand and share best practice. Coordinate the risk disclosures for the CAA’s external annual report.
- Cultural leadership – fostering a risk-aware culture across the organization, ensuring risk management is incorporated into decision-making.
- Risk system – become competent in the use of the CAA’s risk management system.