Role Profile: Risk and Compliance Manager

Transcription

1 Role Profile: Risk and Compliance Manager Location: Adelaide, South Australia. Reports to: Executive Director School Services. Qualifications: Relevant tertiary qualifications. Remuneration: Based on skills, experience and qualifications. Time Allowance: Full time. Primary Purpose: Prince Alfred College is currently in the process of establishing ERM and Compliance Programs in line with the International Risk Management Standard ISO AS/NZ 31000, ISO and the Australian Compliance Standard AS 3806 together with a policy management platform which will ensure that all policies are maintained up-to-date and readily available to staff. As part of this project Prince Alfred College is also implementing a GRC software program (CompliSpace Assurance) through which we will capture and link risks, compliance tasks and incidents (such as complaints and injuries) allocate them to responsible individuals and develop structured reporting systems so as to enhance the decision making processes of department heads, the College s Executive management team, as well as members of the College Council. The Risk and Compliance Manager is integral to this project and the establishment of best practice business and administration processes. The Risk and Compliance Manager may be required to take on other duties as required by the College. As Risk and Compliance Manager you will have primary responsibility for the overall design, implementation and maintenance of Prince Alfred College s ERM, compliance and incident management programs. You will also be expected to work seamlessly with College Council, our management team as well as our front line staff to you act as a change agent to continue to develop Prince Alfred College s risk and compliance culture. Prince Alfred College includes its associated entities - Kent Town Swim and The Early Learning Centre. 1

2 Primary Role and Responsibilities: At Prince Alfred College we believe that the disciplines of ERM, compliance and incident management are integrally related and as such should be managed together through the role of the Risk and Compliance Manager. We also believe that the functions of workplace health and safety, student duty of care, business continuity management and fraud and corruption control are essentially risk based and thus also fall within the role of the Risk and Compliance Manager. Key Responsibilities include: General: Ensuring the alignment of Prince Alfred College and associated entities governance, risk and compliance frameworks with our overall strategic objectives; Providing assurance to Prince Alfred College s key stakeholders in relation to our overall compliance with the Non-Government School Registration Standards and related laws and regulations; Working with other key stakeholders to ensure that Prince Alfred College maximises strategic and operational outcomes through the use of enabling technologies including our GRC Software (CompliSpace Assurance); Facilitating the promotion of a strong culture of risk and compliance awareness and management across Prince Alfred College with a focus on training and mentoring senior staff; Working with other key stakeholders, including the executive management team towards the integration of the key governance and operational programs. Enterprise Risk Management: Reviewing and enhancing the design and implementation of Prince Alfred College s ISO ERM Program so that it creates and protects value within Prince Alfred College; Providing organisational leadership and oversight over Prince Alfred College s ERM Program; Facilitating the establishment and effective implementation of policies and procedures that are required to effectively manage risk within Prince Alfred College; Establishing clear delineations of lines of responsibility for managing the end to end risk process; The continuous monitoring of changes in College activities and ensuring that risks arising from any significant changes are considered within the risk framework; Educating staff on how to conduct risk assessments; Facilitating the maintenance and periodic review of the College s risk registers; Ensuring that risk controls and treatment plans are carried out efficiently and effectively; Preparing risk reports for the executive management team and the College Council; Providing input on all risk issues; and Reviewing the overall effectiveness of the Risk Management Program at least once annually. 2

3 Compliance: The compliance framework within Prince Alfred College and associated entities covers legal and regulatory obligations as well as those arising from organisational policies and contractual obligations. Reference to compliance obligations below covers all areas of compliance. Reviewing and enhancing the design and implementation of the College s current AS 3806 Compliance Program so that it continues to create and protect value within the College; Facilitating the identification of key compliance obligations, with the support of legal and other relevant resources, and translating those requirements into actionable policies and procedures; Facilitating the integration of key compliance obligations into existing practices and procedures and policy documents; Providing or organising ongoing compliance training support for staff to ensure that all relevant persons are trained on a regular basis; Ensuring compliance is factored into position descriptions and employee performance management processes; Setting in place a compliance reporting system; Liaising with regulators as required; Establishing compliance performance indicators; Monitoring and measuring compliance performance; Analysing performance to identify the need for corrective action; Ensuring compliance capabilities and performance are factored into contracts with external suppliers; Undertaking of compliance reviews; Ensuring the compliance program is reviewed on a regular basis; Ensuring there is access to appropriate legal and other professional advice in the design and implementation of the compliance program; Facilitating the appropriate maintenance of compliance records; and Reviewing the overall effectiveness of the Compliance Program at least once annually. Ensure the College is adhering to the National Standards 2007, under the ESOS Act, for International students attending Prince Alfred College. Incident Management: Establishing and ensuring the effective management of appropriate online systems for the effective capture of reportable incidents*; Establishing processes for investigating and analysing data with respect to reportable incidents; and Preparing incident management reporting systems for the College Council and management. * Reportable incidents include but are not limited to complaints, compliance breaches, workplace injuries and near misses, fraud and corruption incidents, environment incidents etc. 3

4 Workplace Health and Safety (WHS): Develop and maintain a Workplace Health and Safety Program; Facilitating College Council and management support of the WHS Program; Implementing and monitoring WHS control initiatives; Ensuring staff and senior management complete awareness training; Co-ordination of the WHS hazard register risk assessment process; Recording and collating incident reports; Monitoring and reviewing overall effectiveness of our WHS Program; and Chair the WHS Committee meetings. Student Duty of Care: Developing and maintaining Student Care Program; Implementing and monitoring Student Care control initiatives; Ensuring staff and senior management complete awareness training; Co-ordination of the risk assessment process; Recording and collating incident reports; and Monitoring and reviewing overall effectiveness of our Student Duty of Care Program. Fraud and Corruption Control: Develop and maintain Fraud and Corruption Control Program documentation; Implementing fraud and corruption control initiatives including the establishment of a Gifts Register; Ensuring staff complete fraud and corruption awareness training; Co-ordination of our fraud and corruption risk assessment process; Recording and collating fraud and corruption incident reports; Conducting or coordinating fraud and corruption investigations; and Monitoring and reviewing overall effectiveness of our Fraud and Corruption Control Program. Business Continuity Management: Developing and maintaining BCM Program documentation; Facilitating College Council and management support of the BCM Program; Ensuring our BCM Program complies with appropriate commercial and regulatory standards (if applicable); Ensuring BCM Recovery Plans are developed and appropriately implemented and maintained; Managing Crisis Management Team documentation; Coordinating BCM testing; Providing specialist BCM guidance as required; Preparing regular reports on business continuity readiness, including status reports on risk assessments, planning and initiatives; Providing/facilitating BCM related training as required; and Monitoring and reviewing overall effectiveness of our BCM Program. 4

5 Qualifications/Work Experience/Personal Attributes: March, 2015 Relevant qualification or experience; Post graduate qualifications in business or related disciplines; Experience in rolling out a GRC Software system; A big picture type of person who can also get into detail when necessary; Excellent change management and negotiation skills; A generalist not afraid to be thrown into the deep end; The ability to communicate to all key stakeholders; Ability to convert complex legislation or information into plain language; Excellent organisational and project management skills; Ability to manage multiple tasks; Excellent communication skills; Ability to meet deadlines and milestones; and Ability to work as part of a team and to co-ordinate some aspects of the work of others. 5