This role will require experience in steering enterprise risk management initiatives, ensuring robust governance, proactive mitigation, and alignment with strategic objectives whilst driving continuous improvement in risk frameworks.

Key Responsibilities:

Enterprise Risk Management

- Operational Risk Assessment: Identify, analyse, and evaluate threats arising from the company's business workflows, including internal processes, people, systems, and external events at unit level. Conduct site visits to plants and business units to assess operational environments. Evaluate the design and operational effectiveness of internal controls, identifying loopholes and recommending risk-aversion measures.
- Data Analytics & Reporting: Extract and analyse data from SAP and other enterprise systems to perform comprehensive analytics. Analyse historical and real-time operational data to detect underlying trends, root causes of inefficiencies, compliance deviations, and process bottlenecks.
- KRI Dashboard & Predictive Analytics: Design and maintain enterprise-wide Key Risk Indicator (KRI) dashboards; leverage advanced analytics tools for predictive insights and trend forecasting to support proactive decision-making.
- ERM Framework Ownership: Enhance and maintain enterprise risk management policies and governance structures aligned with ISO 31000 and COSO frameworks. Ensure continuous alignment with international best practices and regulatory requirements.
- Comprehensive Risk Assessment: Conduct detailed risk assessments, scenario analysis, and stress testing across global operations. Document findings with clear risk ratings and mitigation recommendations.
- Horizon Scanning & Emerging Risks: Identify and monitor emerging risks including geopolitical, regulatory, cyber, and ESG-related threats. Prepare impact assessments and early warning reports for senior management.
- Stakeholder Engagement & Communication:



Facilitate risk workshops across business units; present risk heatmaps, mitigation progress, and strategic recommendations to stakeholders at all levels. Develop risk communication strategies to enhance organisational risk awareness.
- Insurance Portfolio Management: Monitor and optimise insurance coverage; review claims data and insurance performance metrics to ensure adequate protection and cost-effectiveness.
- Regulatory Compliance & Audit Coordination: Maintain compliance with regulatory requirements; coordinate with internal and external auditors; prepare documentation for regulatory submissions and inspections.
- Business Continuity Planning: Contribute to the development and maintenance of business continuity and disaster recovery plans; conduct periodic testing and updates.
- Third-Party & Vendor Risk Assessment: Assess and monitor risks associated with key suppliers, vendors, and business partners; establish risk management requirements for third-party relationships.
- Performance Monitoring: Track and report on key performance indicators including timely completion of risk assessments, accuracy of KRI dashboards, and measurable reduction in high-risk exposures through proactive mitigation efforts.

QualificationsEducational Qualification: CA or equivalent professional qualification; CRMA (Certified Risk Management Assurance), CIA (Certified Internal Auditor), or CIRA (Certified Internal Risk Auditor) preferred Minimum Work Experience: 5 to 7 years in Internal Audit and Risk Management,



with demonstrated experience in enterprise risk assessment, internal control evaluation, and audit execution Technical Skills

- Proficiency in risk assessment methodologies and frameworks including ISO 31000, COSO, and IIA standards for internal audit practice
- Advanced analytical and quantitative skills with demonstrated ability to conduct comprehensive risk assessments, scenario analysis, and root cause analysis of operational issues
- Expertise in designing and maintaining Key Risk Indicator (KRI) dashboards and utilising data analytics tools for predictive insights and trend forecasting
- Robust proficiency in extracting, analysing, and interpreting data from enterprise systems (SAP and similar platforms) to identify compliance deviations, process bottlenecks, and control weaknesses
- Demonstrated competency in evaluating the design and operational effectiveness of internal controls, identifying control gaps, and recommending risk mitigation measures
- Knowledge of business continuity planning, disaster recovery frameworks, and third-party risk assessment methodologies
- Proficiency in audit documentation, regulatory compliance requirements, and preparation of audit reports and regulatory submissions

Behavioural Skills

- Excellent communication and presentation skills, with the ability to articulate complex risk concepts and audit findings to stakeholders at all organisational levels
- Strong attention to detail and commitment to maintaining rigorous operational processes and internal controls
- Demonstrated ability to engage effectively with business units, facilitate risk workshops, and build stakeholder confidence in risk management initiatives
- Proactive mindset with capability to identify emerging risks and horizon-scan for geopolitical, regulatory, cyber, and ESG-related threats

📌 Internal Auditor & Risk Specialist (Telangana)
🏢 DR REDDYS
📍 Telangana