Operational Risk Specialist

The Operational Risk Specialist supports the Department Manager in implementing and maintaining the hospital's risk management framework. This role involves assisting in Enterprise Risk Management (ERM) activities, conducting departmental and project-level risk assessments, monitoring risks and mitigation strategies, and promoting a strong risk-aware culture.

A. Enterprise Risk Management (ERM)

• Assist the ORM Department Head in the development, implementation, and maintenance of the hospital's Operational Risk Management (ORM) framework, ensuring alignment with strategic goals, regulatory standards, and hospital objectives.
• Assist in ensuring all risk management activities adhere to relevant regulatory frameworks and internal policies.
• Collate and prepare status reports on top risks
• Support in ensuring that risk management practices are effectively integrated into the hospital's key processes.

B. Department Level Risk Assessment (DRA), Proactive, and Focused Risk Assessment

• Assist in organizing the yearly initiation of department level risk assessment activities
• Monitor and track the timely submission of risk assessment reports from various departments.
• Aggregate and analyze data from departmental risk assessments and report to the ORM Department Head any identified common trends, potential risks, and areas requiring attention.
• Organize and lead sessions to guide departments through the risk assessment process
• Conduct risk assessments for various operational areas, including but not limited to facility, clinical/patient safety, information security, and vendors, ensuring comprehensive risk coverage.
• Provide subject matter expertise on Information security and vendor risk management, contributing to the refinement and improvement of policies and procedures within the ORM framework.

C. Project Risk Assessment

• Consolidate departmental and project-level risk reports into a comprehensive risk report

D. Risk Registry Review and Feedback

• Conduct thorough reviews of departmental risk registers to ensure accuracy and completeness.
• Provide feedback and recommendation to address any gaps, enhance risk mitigation strategies, and improve overall risk documentation practices.

E. Risk Treatment Plan Implementation Validation Activity

• Support the ongoing evaluation and validation of risk mitigation strategies, ensuring continuous improvement in risk management practices.

F. Data Review and Analysis

• Assist in utilizing data and analytics to track the effectiveness of risk mitigation strategies.
• Provide support in ensuring that risk management metrics are reviewed regularly, making recommendations to adjust strategies and ensure ongoing risk management success.

G. Trainings, Awareness, and Communications

• Support the ORM Department Head in building a risk-aware culture within the hospital by assisting in training, awareness campaigns, and communication efforts.
• Help foster a culture where risk management is embedded in decision-making, operational practices, and daily activities.
• Provide guidance and training sessions on risk management concepts and best practices to staff, executives, and other stakeholders.

H. Risk Management

• Collaborate with Business Continuity Management to ensure coverage on risks related to financial posture and business resiliency
• Coordinate with Finance Risk Management in establishing financial risk controls and identifying trends in claims submissions.
• Participate in risk management projects and programs, particularly in information security and vendor risk assessment.
• Contribute to conducting gap analyses to identify areas for improvement in risk management practices and support ongoing alignment with regulatory and industry standards.
• Provide support in strengthening its risk management practices which may involve recommending additional training, refining risk assessment methodologies, or implementing new tools to support risk identification and mitigation.

I. Administrative

• Managing departmental tools, documentation, and repositories, ensuring all materials are organized, up-to-date, and easily accessible.

J. Act as the team's representative in internal committees and meetings as assigned.

K. Engage in hospital events and activities as directed by the immediate superior.

L. Carry out other duties relevant to the position as assigned.

Experience/Education Requirements:

• Graduate of any four year course
• Minimum of 3 years of experience in risk management
• Advanced training or relevant certifications in information security and compliance, vendor risk management is preferred.
• Experience in enterprise risk management, vendor risk management, and information security management is an advantage.
• Proven experience in risk assessment methodologies, regulatory compliance, and risk reporting.
• Proficiency in online and Google based office programs with Risk Assessment tools and Techniques