Head of Risk Management

Job Description

Reporting to the Group General Counsel, who oversees Legal, Compliance, Data Protection and Risk Management, the Head of Group Risk is responsible for providing Group-wide leadership and oversight of the Enterprise Risk Management framework, ensuring that strategic, operational, financial, legal, regulatory and reputational risks are consistently identified, assessed, monitored and appropriately managed across the organization.

The role leads the Group risk management approach and coordinates risk assessment and mitigation activities across subsidiaries and business units. Acting as a key risk management partner to senior management and business leaders, the Head of Group Risk works closely with Risk Owners, Compliance, Legal, Data Protection, Finance and other relevant functions to strengthen the Group's risk culture and ensure that risk considerations are appropriately embedded into business decision-making.

The role provides consolidated risk insight and reporting to Executive Management and the Management and Supervisory Board, supporting informed decision-making and effective oversight of the Group's risk profile.

KEY RESPONSIBILITIES

Enterprise Risk Management

• Own and maintain the Group Enterprise Risk Management framework, including the Group risk register and risk assessment methodologies, in collaboration with relevant Risk Owners.
• Lead the ongoing development and application of the Group risk methodology in alignment with Group directives and organizational priorities.
• Lead periodic Group-wide risk identification and assessment exercises across subsidiaries and business units, ensuring consistency of approach and quality of risk information.
• Identify and assess emerging, strategic and material risks that may affect the achievement of the Group's objectives.
• Coordinate the development of risk mitigation plans with Risk Owners and monitor their implementation and progress, without performing control testing.
• Provide management with a consolidated view of the Group's key risks, exposures, trends and areas requiring management attention.

Risk Governance

• Lead and coordinate Group risk governance and reporting, providing relevant and timely risk information to Executive Management and the Management and Supervisory Board.
• Facilitate risk committees, cross-functional risk reviews and other relevant risk governance forums.
• Support senior management in defining and reviewing appropriate risk appetite and tolerance levels.
• Ensure that risk governance processes and reporting remain aligned with the Group's evolving risk profile, business priorities and governance requirements.
• Act as a key point of coordination between Risk Owners, senior management and relevant control functions on Group-wide risk matters.

Regulatory & Legal Risk

• Partner with Legal and Compliance to identify, assess and monitor regulatory, litigation and compliance-related risks and their potential impact on the Group.
• Monitor relevant regulatory developments and coordinate the assessment of their potential implications for the Group's risk profile and business activities.
• Ensure that material regulatory and legal risk considerations are appropriately reflected in Group risk assessments and reporting.
• Participate in crisis management activities from a risk management perspective where required.

Data Protection & Information Risk

• Coordinate with the Data Protection Officer on privacy, data protection and cybersecurity risk assessments.
• Contribute to the Group's information risk mapping and coordinate the development and monitoring of related mitigation plans.
• Ensure appropriate alignment between information-related risks and the broader Enterprise Risk Management framework.

Business Continuity & Crisis Management

• Coordinate the risk management aspects of the development and maintenance of Business Continuity plans.
• Support the organization in strengthening its preparedness for material risk scenarios and potential business disruption.
• Participate in crisis preparedness exercises, scenario analysis and related risk assessments.

Risk Culture & Awareness

• Promote and strengthen a consistent risk management culture across the Group.
• Provide guidance, training and support to Risk Owners, business managers and relevant stakeholders on risk management principles, methodologies and responsibilities.
• Embed risk-based thinking into business planning, decision-making and management processes.
• Act as a trusted risk management partner to business and functional leaders, encouraging proactive identification and management of risks.

KEY RELATIONSHIPS

• Group General Counsel
• Executive Management
• Management and Supervisory Board
• Risk Owners / Operational Directors
• Internal Audit Director
• Finance and Business Unit Management
• Compliance
• Legal
• Data Protection Officer
• Senior Business and Functional Management

REQUIRED PROFILE

Qualifications & Experience

• Master's degree in Law, Risk Management, Finance, Business Administration or a related field.
• Minimum 7 years of relevant experience in Enterprise Risk Management, Compliance, Legal, Internal Audit or a related discipline, ideally including experience in a highly regulated business environment.
• Demonstrated experience in managing or coordinating risk management activities across multiple entities, business units or an international organization.
• Experience working with senior management and governance bodies on risk-related matters.
• Strong understanding of Enterprise Risk Management principles, frameworks and governance.
• Professional certification such as FRM, CRMA, ISO 31000 or equivalent is a plus.

Skills & Competencies

• Strong knowledge of Enterprise Risk Management frameworks and methodologies, including COSO ERM and ISO 31000.
• Strong understanding of the distinction between risk management, internal control and internal audit.
• Ability to provide a Group-wide perspective and translate complex risk information into clear management insights and recommendations.
• Strong stakeholder management and influencing skills, with the ability to engage effectively with senior leaders and stakeholders across functions and entities.
• Strong analytical, problem-solving and risk assessment capabilities.
• Excellent communication, presentation and reporting skills, including the ability to communicate effectively with senior management and governance bodies.
• Strong organizational and coordination skills in a complex, multi-entity environment.
• High ethical standards, sound professional judgment and the ability to operate with independence and objectivity.
• Ability to promote a proactive and pragmatic risk culture while maintaining appropriate challenge and oversight.

Europcar Mobility Group

Europcar Mobility Group is a global mobility player, with 75 years of mobility services expertise and a leading position in Europe. “We help to change the way you move” is what we stand for and brings us together.

We offer to individuals and businesses a wide range of car and van rental services, be it for a few hours, a few days, a week, a month or more, on-demand or on subscription, relying on a fleet of more than 250.000 vehicles, equipped with the latest engines including an increasing share of electric vehicles.

Our brands address differentiated needs, use cases and expectations: Europcar® - a global leader of car rental and light commercial vehicle rental, with a premium positioning, Goldcar® - a frontrunner at providing low-cost car rental services in Europe, and Fox-Rent-A-Car®, one of the main players in the car rental market in the US, with a "value for money" positioning.

Customers’ satisfaction is at the heart of the Group’s ambition and that of our more than 8,000 employees, everywhere we deliver our mobility solutions, thanks to a strong network in over 130 countries.

More info at: www.europcar-mobility-group.com