Non Financial Risk Officer

At LeasePlan, we are always asking What's next in mobility.

Join our team and be part of a dynamic, exciting and engaging business, so we can discover What’s next together
- Risk Management_

Objectives of the department

Risk Management supports and advises the Management Team and Management in general in order that an integrated risk management is conducted with a sufficient balance between business and risk expertise on the one hand, and between risk avoidance and risk appetite on the other hand.

Keys tasks of the department

The Risk Department is responsible for:

- Implementing, maintaining, and ensuring an integrated risk management regarding all risk areas within LPBE (financial risk: asset risk, motor insurance risk, credit risk, and treasury risk, non-financial risks: operational risk, information security and model risk, compliance, and privacy, environmental, social and governance risks).
- Supporting and advising the Management Team and the Management in terms of risk expertise.
- Contributing and supporting actively actions, analyzes and recommendations that result in a balance between
- Business and risk expertise
- Risk avoidance and risk appetite
- Non-Financial Risk Officer_

Objectives of the job

The function operates within the context of a broad and integrated Risk Management Framework and is focussed on non-financial risks.

Non-financials risks encompass mainly operational risk, business continuity risk, information risk, environmental, social and governance risks (ESG risks). These risk areas are highly connected with compliance and privacy domains.

The overall purpose of the function is to safeguard LeasePlan’s integrity and reputation and to help protect against financial losses by ensuring and supporting a proper implementation of a control environment in the day-to-day business activities, complying with applicable laws, rules, regulations and LeasePlan’s internal policies and standards.

This translates into the following overall responsibilities:

- Ensuring that LPBE entity and its operations comply with local laws and regulations, and with LeasePlan Corporation Policy and Standard.
- Creating awareness and a sense of responsibility for related rules, policies and procedures.
- Continuously assessing, monitoring, and reporting on non-financial risks and on the effectiveness of controls.
- Be a trusted advisor for management and able to build bridges between management and employees.

The NFRO works in close collaboration with the Risk Director, the information security officer, the legal officer, with the business (all departments), and with LeasePlan Corporation (LPC).

Keys tasks of the job

Operational risk management and business continuity
- Incidents management: The NFRO collects the operational risk incidents occurring in the organization, registers them, analyses their root cause, and defines risk mitigating actions together with the process owners.
- Business continuity: The NFRO is responsible for the implementation of the business continuity management (BCM). The NFRO coordinates the business impact analysis (BIA) and collects input from the managers. Based on BIA, the NFRO sets up the business continuity plan (BCP) and coordinates the different tests plan to ensure that the BCP is effective in case of disruption.
- Change management: The NFRO is responsible for operational risk assessment of the project’s portfolio related to the transformation. The NFRO is involved in the transformation office and, together with the transformation director, assesses on a regular basis the risks related to the projects and initiatives inherent to the transformation.
- Audit: The NFRO ensures the follow-up of the action plans linked to findings of past audits (external audit and Group Audit) until completion. The NFRO reports progress and/or issues to the local Management Team and then to the Group Audit.
- Risk Appetite Setting (RAS): The NFRO is responsible for the operation risk appetite setting during the annual plan process. The NFRO monitors monthly the evolution of the operational risks and ensures that it remains within the operational risk appetite tolerance limits (Country Based Risk Appetite | CoBRA).
- Awareness and Culture: The NFRO maintains the awareness on ORM and BCM at a high level within the organization through training to managers and staff and other means like periodical newsletters.

Internal controls
- Risk Control Framework (RCF): The NFRO ensures a proper execution of the Risk and Control Framework in line with the Risk and Control Register. To assess the proper execution, the NFRO performs control testing and provides an independent opinion on controls design, effectiveness and efficiency.
- Risk and control self-assessments (RCSA): The NFRO ensures a proper execution of the risk and control self-assessments of the different processes by the process owners. This means the following: assessing the inherent operational risks related to the proce