Assistant Manager, Risk Management
The National Kidney Foundation (NKF) is dedicated to promoting kidney health and providing quality, highly subsidised dialysis treatment and holistic care to patients. We strive to be an advocate and integrator for the community, by the community.
While supporting kidney failure patients with quality dialysis and integrated care, NKF’s greater mission lies in preventing or delaying kidney failure through health education, deeper community integration, and strategic partnerships.
As we work toward our Future Forward 2030 vision, we remain committed to:
- Tackling the growing prevalence of kidney failure
- Enhancing patient support and care
- Leveraging technology to improve the efficacy and quality of treatment
The Risk & Compliance Officer plays a key role in supporting the Foundation’s governance and assurance objectives by contributing to the effective implementation of risk management and compliance frameworks. We are seeking a detail-oriented and analytical individual with a background in IT audit, systems administration, or related disciplines, who is keen to apply their technical expertise in a risk and governance context. In this role, you will support compliance and risk reviews, maintain the enterprise risk register, provide technical insights to strengthen controls, and manage secretariat duties for risk and compliance committees. Your responsibilities are as follows:
- Risk & Compliance Reviews
- Assist in the development and execution of the annual risk and compliance review plan.
- Conduct risk assessments, control testing, and compliance checks for key operational and IT processes.
- Monitor regulatory and policy compliance, escalating breaches and recommending corrective actions.
- Liaise and coordinate compliance review activities with Risk Champions from each department or function.
- Support risk awareness and training initiatives across the organization.
- Enterprise Risk Register Maintenance
- Maintain and update the Enterprise Risk Register, ensuring risks are accurately assessed and tracked.
- Work with business units to identify, assess, mitigate, and track operational and IT-related risks.
- Generate periodic risk dashboards and analytics for Management and Board reporting.
- Support scenario analysis, control self-assessments, and key risk indicator (KRI) tracking.
- IT Risk and Control Advisory
- Apply IT audit or IT systems knowledge to assess technical and cyber-related risks.
- Support IT departments in developing controls and compliance mechanisms for systems and data protection.
- Liaise with internal audit, IT security, and external regulators on IT risk and compliance matters.
- Secretariat & Governance Support
- Serve as secretariat for the Audit Risk Committee and other governance forums.
- Coordinate meeting schedules, prepare agenda papers, compile minutes, and follow up on action items.
- Maintain accurate records of committee decisions and ensure timely submission of reports.
- Support documentation and communication of policies, procedures, and risk updates to business units.
What we are looking for:
- Preferably 5–7 years of relevant experience in enterprise risk management, operational risk, compliance, governance, or related assurance functions.
- Exposure to IT risk, IT audit, or technology controls will be an advantage, but is not mandatory.
- Professional certification preferred: CISA, CRISC, CISM, or equivalent.
- Familiarity with risk and governance frameworks (e.g. ISO 31000, COSO ERM, or similar) is desirable.
- Demonstrated experience in enterprise and operational risk assessments, risk identification, mitigation planning, and monitoring.
- Experience in maintaining risk registers, governance documentation, policies, and procedures.
- Understanding of regulatory, compliance, and internal control environments, with the ability to translate requirements into practical risk controls.
- Proven experience in organizational and coordination tasks, preferably handling secretariat duties.
- Strong analytical and problem-solving skills, with meticulous attention to detail.
- Proficiency in risk management tools and Microsoft applications, including Excel, SharePoint, Power BI, and Word.
- High level of integrity and professional judgment, particularly in handling confidential information.
- Self-motivated, proactive, and able to take ownership of responsibilities independently.
- Contribute directly to NKF’s mission and make a tangible impact on healthcare in Singapore
- Exposure to senior leadership and strategic initiatives
- Opportunity to work on IT and governance projects in a dynamic nonprofit environment
- Supportive team culture with focus on learning, growth, and development