Genève Invest (Europe) S.A.
Luxembourg, Luxembourg (Luxembourg)
EN
Job Description
Chief Risk Officer
The Chief Risk Officer (CRO) of Genève Invest (Europe) S.A. is responsible for the company's independent risk control function. He ensures that the Executive Board and the Board of Di-rectors have, at all times, an appropriate, objective, comprehensive and forward-looking view of the company's risk profile, thereby supporting sound and prudent corporate governance. To this end, he identifies, assesses, monitors and reports on the material existing and potential risks to which the company is, or may in future be, exposed as a result of its business model, organ-isation, products and services, client structure, the systems it uses and its external dependen-cies. It assesses the interrelationships between individual risks, monitors internal and external developments, and critically examines risk-related assumptions, decisions and measures taken by the operational units in an independent and constructive manner. The risk control function is designed to act as a second line of defence; responsibility for assuming and managing risks on an ongoing basis remains with the respective business and support functions.
The CRO develops, maintains and reviews the company-wide risk management framework, taking into account the size, nature and complexity of the business activities as well as the principle of proportionality. This includes, in particular, the current risk taxonomy, risk assess-ment methods, the company's risk appetite, appropriate risk indicators and limits, escalation procedures, and the relevant policies and procedures. The CRO ensures that all material risks facing the company are adequately identified and assessed in a consistent manner. This area of responsibility covers, in particular, market price risks, including share price, interest rate, spread, foreign exchange and commodity price risks; credit risks, including default, concentra-tion and country risks; liquidity risks, including market and internal liquidity risks; and opera-tional risks. Operational risks include, in particular, information and communication technol-ogy risks, process risks, internal and external fraud risks, personnel risks, risks arising from external events and risks arising from the engagement of or reliance on third parties. Further-more, the area of responsibility covers corporate risks, in particular business model, strategy and reputational risks, legal and compliance risks in close coordination with the compliance function, as well as sustainability and ESG risks. The CRO ensures that new or significantly changed risks are promptly incorporated into the risk taxonomy and into ongoing risk monitor-ing.
On the basis of the risk assessment, the CRO draws up a risk-based annual control plan and adapts it in the event of significant changes to the risk profile or the control environment. The CRO carries out independent controls or coordinates their implementation, assesses the ade-quacy and effectiveness of existing risk management and control measures, and documents the results in a transparent manner. In doing so, the CRO takes into account not only identified breaches or errors, but also vulnerabilities, inadequate control designs, increased residual risks, recurring incidents, negative trends and potential future risks. Findings are prioritised accord-ing to their significance and are accompanied by clear actions, responsibilities and implemen-tation deadlines. The CRO monitors the timely implementation of the agreed measures, reviews their long-term effectiveness and only closes findings once sufficient evidence has been pro-vided. Significant findings, risk breaches, substantial delays, inadequate measures or other de-velopments that could impair the sound and prudent management of the company are escalated immediately to the Executive Board and, where necessary, directly to the Board of Directors.
The CRO reports regularly to the Executive Board and the Board of Directors, and at least within the framework of the scheduled reporting cycles. The reports cover, in particular, the current risk profile, developments in material risks, compliance with the defined risk appetite, limits and indicators, material incidents and losses, the results of independent controls, out-standing findings and the status of remedial measures, as well as relevant internal and external changes. The reports must be clear, precise, tailored to the audience and forward-looking, and must enable the Executive Board and the Board of Directors to fulfil their respective oversight and decision-making responsibilities effectively. The CRO shall also prepare an annual overall assessment of the risk profile and the adequacy of the risk management and control framework. This assessment shall take into account business performance, significant changes to the or-ganisation, processes, systems, outsourced activities and the regulatory environment, as well as findings from controls, incidents and measures implemented.
The CRO must be involved at an early stage in significant risk-related decisions. He provides an independent risk assessment of new products and services, significant changes to existing offerings, major organisational or technical changes, outsourcing and other third-party rela-tionships, exceptional transactions, and decisions that could materially affect the company's risk profile. In particular, the CRO assesses whether the associated risks can be adequately identified, understood, mitigated and monitored, and whether the intended controls, resources and responsibilities are appropriate. Operational decision-making and responsibility for imple-mentation remain with the relevant senior management or functional departments; the risk con-trol function documents its independent assessment and escalates significant objections or un-resolved risk issues.
The CRO performs his or her role independently of the activities to be controlled and does not undertake any operational tasks that would require him or her to monitor his or her own deci-sions or work outputs. He or she has the necessary authority, sufficient time and material re-sources, and unrestricted access to all information, documents, systems, staff, meetings and committees required for the proper performance of his or her duties. He may communicate directly with senior management and the Board of Directors without prior authorisation and may escalate significant matters. In carrying out his duties, he works closely with the compli-ance function, internal audit and other relevant business and support functions, whilst ensuring that responsibilities and independence remain clearly delineated. In particular, the risk control function does not replace the operational units' responsibility for their own risks, nor does it replace the specific duties of the compliance function or Internal Audit. The CRO promotes an appropriate risk culture, supports staff awareness of risks and controls, and contributes to open, objective and solution-oriented communication regarding risks, vulnerabilities and errors.
The successful candidate must possess appropriate specialist knowledge and practical experi-ence in risk management, internal control and the regulatory environment applicable to Lux-embourg-based investment firms. They must understand the company's business model, prod-ucts, processes, systems and key dependencies, and be able to assess complex issues inde-pendently and communicate them clearly. The role requires integrity, independent judgement, professional critical thinking, assertiveness, reliability and the ability to escalate matters clearly and objectively, even when opinions differ. The job description is reviewed at least annually and whenever there are significant changes to business operations, the organisation, the risk profile or regulatory requirements, and is amended as necessary.
DE
Stellenbeschreibung
Chief Risk Officer
Der Chief Ris [...]
Publié Il y a 5 jour(s)