Risk and Compliance Manager (Ukrainian Nationals Only)
Ukraine
Save the Children International
ROLE PURPOSE:
The Risk and Compliance Manager will be responsible for strengthening risk management capacity within SCI Ukraine and with our partner organisations, undertaking risk assessments and risk management planning, strengthening critical internal controls across SCI Ukraine, providing informed and high-quality risk and compliance advisory to stakeholders, and coordinating fraud and data protection investigations.
The candidate is expected to travel regularly to Area Offices and to our partner organisations to monitor risk management practices, undertake spot checks, strengthen risk management capacity, assess risks and support in identification of appropriate mitigation measures, provide sound risk management advice, and follow up on any agreed action plans.
The candidate is expected to be conversant with the Ukrainian laws and regulations; SCI policies, standards & guidelines; donor regulations & requirements; and humanitarian standards.
This is a demanding role and operates in a complex and fast-moving context. The candidate is expected to work cross-functionally and with our partner organisations across Ukraine.
In the event of a major humanitarian emergency, the role holder will be expected to work outside the normal job description and be able to vary working hours accordingly.
KEY AREAS OF ACCOUNTABILITY:
Strengthen Risk & Compliance Capacity
Provide leadership and coordination in raising awareness and strengthening risk management capacity of SCI Ukraine staff and partner organisations, especially on key areas of risk. Key responsibilities include:
- Become a subject matter expert on the SCI Risk Framework, policies, tools and techniques.
- Orient new staff and partners to risk and compliance policies, standards, tools and processes. This includes any relevant risks and controls in place to mitigate them.
- Work closely with the Learning & Development Unit to monitor the level of compliance in the completion of mandatory compliance trainings.
- Coordinate fraud prevention training for SCI staff and partners.
- Collaborating with the Learning and Development Unit, assess the risk and compliance capacity gaps in SCI staff at the Country Office and Area Offices. Develop and implement an annual capacity strengthening plan to address the gaps.
- Collaborating with the Partnerships Unit, assess the risk and compliance capacity gaps among our partner organisations. Develop a custom approach for addressing capacity gaps with partner organisations.
- Prepare and facilitate risk management sessions during kick-off meetings.
- Raise general awareness about laws & regulations, policies, frameworks, tools, trends and issues about risk and compliance through various channels, including but not limited to meetings & town hall events, newsletter, email, Microsoft Teams and other appropriate channels.
- Keep track of any capacity strengthening activities and its impact on minimising risks and compliance violations in SCI Ukraine and with our partner organisations
Risk Assessments & Risk Management Planning
Conduct risk assessments and develop risk management plans in coordination with Risk & Compliance Director, Area Directors, CO and AO Risk Committees, and other stakeholders. Key responsibilities include:
- Support the Partnerships Unit in conducting the partner assessment (using the Partner Assessment Tool) and identify any risk management capacity gaps. Responsible to address risk management gaps identified.
- Support the Awards Unit in conducting the Proposal and Award Risk Tool and ensuring that risks identified for any new award opportunities are aligned with the CO Risk Register.
- Collaborate with Area Offices, Technical Advisors, MEAL and other relevant stakeholders and identify any risks for new award opportunities. Support the New Business Development Unit to reflect relevant risks in proposal narratives and annexes.
- Support the Programme Managers in validating risks identified during project design & proposal development phase and their relevance during project implementation. Facilitate the development of the risk register and support risk monitoring during the project implementation.
- Facilitate risk assessments at Area Offices and with partner organisations and help develop risk management plans. Support the Area Office and partner organisation risk focal point to monitor the risk management plan.
- Support partners, AOs and COs functional leads in escalating risks as required.
- Support the Risk & Compliance Director in coordinating mandatory risk assessment processes and and complete filling the relevant tools e.g. SCARF, fraud assessment, aid diversion assessment, data protection impact assessment, etc.
Internal Controls & Governance
Work with relevant stakeholders in CO, AOs and with partner organisations to conduct spot checks and strengthen internal controls, including implementation of Global Assurance, audit, management reviews and investigation recommendations. Key responsibilities include:
- Working closely with compliance focal points in different departments & units, ensure that key internal control mechanisms (especially for top risks) are known, applied and adhered to by relevant stakeholders at the CO, AOs and partner organisations.
- Develop quarterly plans for conducting spot checks in SCI CO, AOs and with partner organisations based on the top risks identified. Facilitate the spot checks in collaboration with subject matter experts from other functions, make recommendations and support the development of action plans to address gaps. Monitor and follow up on action plan implementation.
- Capture action items in the Management Improvement Plan and follow up with relevant stakeholders on the timely implementation of recommendations from Global Assurance audit reports, other audits, management reviews and investigation recommendations. Update the relevant reporting systems on the progress that has been made.
- Review and attend key control meetings and provide risk and compliance input e.g. the Award Review Meeting, etc.
- Actively participate in the CO and AO Risk Committees. Provide secterarial services for the Risk Committees to ensure key issues are recorded and action items are followed up.
Risk Management Advisory
Provide high quality advisory on risk management and compliance (including on local laws & regulations, member/donor requirements, SCI policies & standards, and humanitarian standards). As such, consult with other compliance functions in formulating these advisories. Key responsibilities include:
- Stay abreast of all Ukrainian legal changes, SCI organisational changes, updates to policies and procedures, changes in donor requirements and changes to the humanitarian context and standards.
- Share best practices and support the development of innovative and practical solutions to challenges faced by the CO, AOs and partner organisations.
- Provide general support and respond to risk and compliance inquiries from CO functions, Area Offices and from partner organisations.
- Produce high quality risk and compliance advisories and insightful reports to enable CO, AOs and partner organisations make decisions based on sound advice.
- As a member of the Extended Senior Management (ESMT), provide sound advice to the ESMT during meetings. Support follow up on outstanding action items in the Management Improvement Plan.
Incident Response & Investigations
Provide leadership in investigating fraud & data protection cases. Once investigations are completed, follow up on the recommendations to be undertaken and escalate when meaningful progress is not being made. Key responsibilities include:
- Work with Human Resources, Safeguarding, Accountability, Supply Chain and other compliance focal points in assuring that staff, partners, suppliers and the people we serve are aware of the standards of integrity we hold ourselves to and the reporting channels they can use to report any incidents of violations.
- Provide independent reporting of incidents on DATIX.
- Lead and/or coordinate fraud and data protection investigations in accordance with the SCI Investigations Framework. Ensure investigations are completed within the set target time.
- Coordinate and track list of multi-faceted investigators in Ukraine and ensure refreshers are conducted regularly.
- Conduct training on the use of DATIX to report incidents and manage cases.
- Provide reports on progress made on investigations and escalate any issues preventing timely closure of cases.
QUALIFICATION:
At minimum, Bachelor’s degree in Criminal Justice, Accounting, Law, or other related field, with at least 5 years of relevant experience.
EXPERIENCE AND SKILLS
Essential
- 5+ years of relevant experience, with a minimum of 3 years spent working at the NGO, public or commercial sectors at a mid-management level.
- An unquestionably high level of integrity and ethics. Commitment to Save the Children values.
- Able to challenge decisions based on an independent assessment of control environment.
- Experience of working effectively, independently, and with minimal supervision. Strong personal organisational, self-management skills with the ability to take initiative and to meet tight deadlines.
- Proven ability to have a highly strategic focus, whilst dealing competently with operational matters.
- Strong relationship builder with a proven track record in forming strong partnerships and utilising collaborative approaches.
- Excellent communication skills. Fluent in written and spoken English and Ukrainian
- Ability to lead and work in teams and motivate others.
- Highly developed cultural awareness and ability to work well with people from diverse backgrounds and cultures.
- Available to travel frequently to SCI Ukraine offices, partner offices and project locations.
- Computer fluency; highly competent using MS Word, Excel, PowerPoint, Outlook and able to learn how to use new applications quickly.
Desirable
- Experience within an INGO, ideally at a country office level, or similar other organisation working with vulnerable communities and children or with similar experience within Save the Children.
- Broad spectrum of humanitarian and/or development programming experience, with strong analytical skills.
- Experience in fraud awareness and case investigation management.
- Knowledge of the local and international control and legal framework affecting operations in Ukraine.
- Experience in audit management.
- Experience in preparing both financial and management accounts.
- Experience with Save the Children systems (e.g. AMS, Agresso, Datix, etc).
Additional job responsibilities
The duties and responsibilities as set out above are not exhaustive and the role holder may be required to carry out additional duties within reasonableness of their level of skills and experience.
Equal Opportunities
The post holder is required to carry out the duties in accordance with the SCI Equal Opportunities and Diversity policies and procedures.
Child Safeguarding:
We need to keep children safe so our selection process, which includes rigorous background checks, reflects our commitment to the protection of children from abuse.
Health and Safety
The post holder is required to carry out the duties in accordance with SCI Health and Safety policies and procedures.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits Compliance Governance Incident response Monitoring Risk assessment Risk management
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.