Risk Manager (CPT/JHB)

What will you do?

This exciting opportunity is available within Group Procurement Risk & Governance – Group Procurement Risk Specialist at Tygervalley, Bellville (Cape Town) or Alice Lane, Sandon (Gauteng). This is a Group-level role in the Group Procurement Office, operating across the Sanlam and Santam Group.

The Group Procurement Risk Specialist is a specialist management level role responsible for procurement first line risk management and oversight across the Sanlam and Santam Group with the support of Group Enterprise Risk Management. Reporting to the Head: Group Procurement Risk & Governance, the incumbent supports the formulation and implementation of the risk management strategy for Group Procurement, ensures adherence to Group and Cluster risk management policies, frameworks, standards and requirements, and enables efficient first-line procurement risk management in collaboration with Group Enterprise Risk Management.

What will make you successful in this role?

Risk Management

• Embed procurement risk management and digitisation requirements to enable comprehensive risk visibility across suppliers, categories, contracts, business units, and the wider Group.
• Facilitate procurement and third-party risk assessments across the supplier lifecycle, including sourcing, supplier selection, onboarding, contract management, performance monitoring, renewal, and termination.
• Ensure the effective implementation and continuous enhancement of the Third-Party Risk Management Framework, including supplier due diligence, risk segmentation, monitoring, and governance.
• Identify, assess, monitor, and report on key procurement risks, including supplier concentration risk, operational resilience risk, financial risk, supply chain disruption risk, cyber risk, ESG risk, regulatory risk, and reputational risk.
• Manage procurement-related risk events and incidents, including supplier failures, contract breaches, service disruptions, fraud, and regulatory non-compliance, ensuring root cause analysis and effective remediation actions are implemented.
• Proactively support Procurement and Business stakeholders in identifying procurement control weaknesses, non-compliance issues, and emerging supplier risks, and assist in developing practical remediation plans.
• Assess the impact of new legislation, regulatory requirements, and industry developments on procurement and third-party risk management practices and support the implementation of appropriate mitigating actions.
• Ensure a thorough understanding of the organisation's procurement strategy, supply chain dependencies, critical suppliers, business objectives, and emerging external risks affecting supplier performance and continuity.

Procurement Risk Governance and Assurance

• Drive continuous enhancement of procurement risk governance, supplier oversight processes, and third-party risk management capabilities.
• Enable Procurement and Business stakeholders to identify, monitor, and interpret procurement risk indicators, supplier performance metrics, and risk appetite thresholds.
• Assist stakeholders in developing and maintaining Procurement Key Risk Indicators (KRIs), supplier risk metrics, and early warning indicators.
• Conduct procurement policy conformance reviews, supplier governance reviews, thematic reviews, and risk-based assessments.
• Perform risk-based reviews of procurement processes and controls, identifying opportunities for control enhancement, efficiency, and standardisation.
• Review supplier mitigation strategies, remediation plans, and action progress to ensure risks are addressed within agreed timelines.
• Support operational resilience initiatives by ensuring adequate governance over critical and material suppliers and outsourced service providers.
• Prepare procurement risk reports, third-party risk dashboards, management reports, and committee submissions for Executive Management and Risk Committees.

.

Stakeholder Management

• Develop and maintain effective relationships with Procurement, Supply Chain, Legal, Compliance, Finance, Information Security, Internal Audit, and Business stakeholders.
• Manage stakeholder engagement and advisory activities for allocated procurement categories, supplier portfolios, and business units.
• Actively participate in Procurement Governance Forums, Supplier Review Forums, Risk Committees, and relevant business meetings, providing meaningful risk insights and challenges.
• Provide advisory support on procurement strategies, supplier selection decisions, contract negotiations, outsourcing arrangements, and supplier performance concerns.
• Promote a strong procurement risk culture through stakeholder engagement, awareness initiatives, training, and coaching.

Continuous Improvement

• Keep abreast of emerging procurement, supplier, operational resilience, regulatory, geopolitical, cyber, and ESG trends that may impact the organisation.
• Drive continuous improvement initiatives across procurement risk management processes, methodologies, systems, and reporting capabilities.
• Actively pursue personal development opportunities to maintain specialist expertise in procurement, supply chain, third-party risk management, and governance disciplines.

Qualification and Experience

Undergraduate Degree: Bachelor of Commerce (BComm) in Risk Management, Insurance, or Finance.

Postgraduate Specialization: Postgraduate Diploma in Risk Management or a BComm Honours in Insurance and Risk Management advantageous.

Professional Certifications, Affiliations and Designations

One or more of the following:

• FRM (Financial Risk Manager).

• CRISC (Certified in Risk and Information Systems Control).

• PRM (Professional Risk Manager).

• CPA or CIA (Certified Public Accountant / Certified Internal Auditor).

• Relevant procurement qualification(s), industry certification and/or professional membership (IRMSA Certification; IISA or CIPS Affiliation).

• Minimum of 10 years' experience in risk management, internal audit or operations within financial services, procurement, or supply chain.

• 1LoD Specialization: Proven experience executing risk assessments, managing control frameworks, and designing remediation plans directly within a business unit rather than acting as an independent overseer.

• Experience in third-party risk management.

• Experience within a South African insurer or broader financial services environment advantageous.

• Experience implementing procurement risk frameworks, and third-party risk monitoring tools are advantageous.

Knowledge and Skills

• Strong knowledge of Procurement Risk Management and Third-Party Risk Management principles and best practices.
• Understanding supplier lifecycle management, strategic sourcing, contract management, and supplier performance management.
• Knowledge of operational resilience, outsourcing governance, and supply chain risk management.
• Understanding of South African financial services regulatory requirements.
• Knowledge of procurement-related legislation, governance requirements, and regulatory frameworks.
• Understanding risk management, compliance, internal control, and governance frameworks.
• Knowledge of ESG and sustainability considerations within supplier and procurement environments.
• Excellent stakeholder engagement, facilitation, communication, and presentation skills.
• Strong analytical, problem-solving, and risk assessment capabilities.
• Excellent report writing and executive reporting skills.
• Ability to challenge constructively and influence decision-making at senior management level.
• Ability to adapt to changing business, regulatory, supplier, and market conditions.
• Strong supplier governance and third-party risk management capabilities.
• Experience in procurement digit