Chief Risk Officer at ISN Medical – Apply Now

About the job

• The Chief Risk Officer (CRO) is responsible for ensuring that ISN operates within a fully risk-managed, compliant, and resilient environment, with 100% adherence to legal, regulatory, quality, safety, and environmental standards.
• The role provides enterprise-wide leadership over risk management, compliance, internal audit, and business continuity, with the objective of minimizing losses from adverse events, strengthening internal controls, and ensuring strong service-level performance with strategic partners.

Key Responsibilities

• Design, implement, and maintain an enterprise-wide risk management framework, including policies, controls, risk registers, and metrics to identify, assess, monitor, and mitigate risk exposure.
• Ensure effective risk governance structures, including reporting to executive leadership and the Board Audit & Risk Committee.
• Proactively identify emerging operational, financial, regulatory, and strategic risks, recommending mitigation actions in line with ISN’s risk appetite.
• Maintain total costs arising from adverse events, non-compliance, or risk exposure below ₦1,000,000 annually.
• Ensure 100% adherence to all applicable legal, regulatory, quality, safety, and environmental standards across ISN’s entire operational footprint.
• Monitor compliance with healthcare, medical device, and quality regulations, including ISO and other applicable industry standards.
• Serve as the primary point of accountability for regulatory compliance, audits, and inspections.
• Submit accurate, complete, and timely monthly risk and compliance reports to executive management and the Board.
• Develop and execute an annual risk-based internal audit plan, ensuring 100% implementation of all approved audit activities.
• Evaluate the adequacy and effectiveness of internal controls, financial processes, operational systems, and governance practices.
• Track audit findings, ensure timely remediation, and validate closure of corrective actions.
• Provide independent assurance on the effectiveness of ISN’s internal control and risk management systems.
• Establish and maintain a comprehensive Business Continuity Management (BCM) framework.
• Ensure that at least 80% of critical business functions have approved, tested, and regularly updated business continuity and disaster recovery plans.
• Lead crisis management planning, simulations, and post-incident reviews to strengthen organizational resilience.
• Align corporate services and risk management activities with ISN’s overall strategic objectives, measured through quarterly and annual performance reviews.
• Implement a minimum of five (5) approved sustainability initiatives, supporting environmental, social, and governance (ESG) priorities.
• Drive operational efficiency initiatives to reduce facilities and operational costs by at least 10%, through energy efficiency, optimized resource utilization, and improved maintenance strategies.
• Monitor and enforce minimum 90% SLA adherence across all strategic vendor and partner relationships.

Job Requirements & Qualifications

• Bachelor’s degree in Accounting, Finance, Risk Management, Law, Business Administration, or a related field.
• A Master’s degree (MBA, MSc, or equivalent) is highly desirable.
• Professional certifications such as ACA, ACCA, CIA, CISA, CRISC, FRM, or ISO Lead Auditor are strongly preferred.
• Minimum of 10–15 years’ experience in risk management, internal audit, compliance, or governance roles.
• At least 5 years in a senior or executive leadership position, preferably within regulated industries such as healthcare, medical devices, manufacturing, or financial services.
• Proven experience designing and implementing enterprise risk management and internal audit frameworks.
• Demonstrated success in regulatory engagement, audit management, and board-level reporting.
• Strong understanding of enterprise risk management, internal controls, and regulatory compliance.
• Excellent analytical, investigative, and problem-solving skills.
• High ethical standards with strong independence and objectivity.
• Strong stakeholder management and communication skills, including Board engagement.
• Ability to balance risk management with business enablement and operational efficiency.