Risk Management Officer
Heraklion International Airport · Heraklion, Crete, Greece · onsite
International Airport of Heraklion, Crete S.A. is currently looking for a:
Risk Management Officer
Responsibilities
- Develops and maintains the Enterprise Risk Management Policy, methodology, procedures and reporting framework.
- Supports the definition and reviews of risk appetite, risk tolerance and escalation criteria.
- Coordinates enterprise-wide and function-specific risk assessments.
- Facilitates risk workshops with business leaders, risk owners and action owners.
- Assesses inherent risk, the design and effectiveness of controls, and residual risk.
- Identifies risk interdependencies, concentrations and emerging exposures.
- Establishes, maintains and regularly updates the corporate Risk Register.
- Monitors risk-treatment plans, implementation deadlines and supporting evidence.
- Challenges risk assessments and mitigation proposals constructively and independently.
- Escalates significant risks that exceed approved appetite or tolerance.
- Prepares risk reports, dashboards, heat maps and decision-oriented analysis for Management and the Company’s governance bodies.
- Cooperates with the responsible functions on business continuity, crisis resilience, insurance and operational readiness.
- Provides risk-management guidance, tools, training and coaching across the organisation.
- Coordinates with Compliance, Internal Audit and specialist functions while maintaining clear accountability and functional boundaries.
Requirements
- Bachelor’s degree in Finance, Economics, Business Administration, Engineering, Statistics or a related discipline.
- A postgraduate qualification in Risk Management, Finance, Business Administration or a related field would be considered an asset.
- A relevant professional risk-management certification would be considered an asset.
- At least 7 years of relevant experience in enterprise risk management, internal controls, financial risk, operational risk, insurance, audit, corporate planning or a related field.
- Experience in aviation, infrastructure, concessions, construction, transport or another complex and regulated operating environment is highly desirable.
- Demonstrated experience in risk assessments, Risk Register administration, control evaluation, mitigation monitoring, scenario analysis and senior-management reporting.
- Strong knowledge of enterprise risk-management principles, risk governance and internal-control concepts
- Excellent command of written and spoken Greek and English.
- Proficiency in Microsoft Office, data-analysis, reporting and risk-management tools.
Competencies
- Ability to analyse complex and interdependent risks and translate findings into concise, decision-oriented reporting.
- Strong facilitation, stakeholder-management, training and presentation skills.
- Ability to challenge assumptions constructively, objectively and independently.
- High standards of integrity, discretion, confidentiality and professional judgement.