Risk Management Officer

International Airport of Heraklion, Crete S.A. is currently looking for a:

Risk Management Officer

Responsibilities

• Develops and maintains the Enterprise Risk Management Policy, methodology, procedures and reporting framework.
• Supports the definition and reviews of risk appetite, risk tolerance and escalation criteria.
• Coordinates enterprise-wide and function-specific risk assessments.
• Facilitates risk workshops with business leaders, risk owners and action owners.
• Assesses inherent risk, the design and effectiveness of controls, and residual risk.
• Identifies risk interdependencies, concentrations and emerging exposures.
• Establishes, maintains and regularly updates the corporate Risk Register.
• Monitors risk-treatment plans, implementation deadlines and supporting evidence.
• Challenges risk assessments and mitigation proposals constructively and independently.
• Escalates significant risks that exceed approved appetite or tolerance.
• Prepares risk reports, dashboards, heat maps and decision-oriented analysis for Management and the Company’s governance bodies.
• Cooperates with the responsible functions on business continuity, crisis resilience, insurance and operational readiness.
• Provides risk-management guidance, tools, training and coaching across the organisation.
• Coordinates with Compliance, Internal Audit and specialist functions while maintaining clear accountability and functional boundaries.

Requirements

• Bachelor’s degree in Finance, Economics, Business Administration, Engineering, Statistics or a related discipline.
• A postgraduate qualification in Risk Management, Finance, Business Administration or a related field would be considered an asset.
• A relevant professional risk-management certification would be considered an asset.
• At least 7 years of relevant experience in enterprise risk management, internal controls, financial risk, operational risk, insurance, audit, corporate planning or a related field.
• Experience in aviation, infrastructure, concessions, construction, transport or another complex and regulated operating environment is highly desirable.
• Demonstrated experience in risk assessments, Risk Register administration, control evaluation, mitigation monitoring, scenario analysis and senior-management reporting.
• Strong knowledge of enterprise risk-management principles, risk governance and internal-control concepts
• Excellent command of written and spoken Greek and English.
• Proficiency in Microsoft Office, data-analysis, reporting and risk-management tools.

Competencies

• Ability to analyse complex and interdependent risks and translate findings into concise, decision-oriented reporting.
• Strong facilitation, stakeholder-management, training and presentation skills.
• Ability to challenge assumptions constructively, objectively and independently.
• High standards of integrity, discretion, confidentiality and professional judgement.