Job Description

GENERAL DESCRIPTION

The Deputy Manager, Enterprise Risk Management (ERM) & Insurance Management (IM) supports the Group’s enterprise risk management and insurance management agenda by coordinating risk assessments, risk reporting, risk dashboards, insurance programme administration, renewal activities, claims monitoring and risk financing support across KPJ Healthcare Berhad.

The role supports the Deputy General Manager, ERM & IM and the CRSO by translating Board, Risk, Sustainability & Governance Committee (RSGC), Management and departmental expectations into structured implementation, documentation, monitoring and follow-through.

The role acts as a practical risk and insurance business partner to HQ functions, hospitals, support companies and the RCO network. The position requires a candidate who is comfortable in both enterprise risk and insurance technical matters, including principal and operational risk reporting, KRIs, risk registers, insurance policy schedules, sums insured, coverage limits, deductibles, exclusions, declarations, renewal milestones, claims trends and coordination with brokers, insurers and takaful operators.

A. Functional Leadership, Governance and Reporting Support

• Support the implementation of the ERM & Insurance Management annual plan by converting Board, RSGC, Management and departmental priorities into clear workplans, deliverables, timelines and action trackers.

• Coordinate and maintain ERM & IM reporting calendars, committee timelines, paper submission requirements, matters arising, action trackers and documentation repositories for relevant governance forums.

• Support the preparation, review and quality assurance of ERM, principal risk, emerging risk, insurance management and claims updates for MRSGC, RSGC, KGMC, OPM and other governance forums, where applicable.

• Provide working-level guidance to hospitals, support companies, HQ functions and the RCO network on risk registers, risk submissions, insurance declarations, claims information, evidence requirements and reporting expectations.

• Maintain risk governance templates, insurance schedules, renewal trackers, claims dashboards, KRI dashboards, risk appetite trackers, action plan logs and other tools required for consistent reporting.

• Escalate incomplete, inconsistent or delayed risk and insurance submissions to the DGM, ERM & IM, CRSO and relevant stakeholders, where required.

B. Enterprise Risk Management and Strategic Risk Support

• Support the implementation and continuous improvement of the Group ERM framework, including identification, assessment, mitigation, monitoring and reporting of principal, strategic, emerging and material operational risks.

• Assist in the review and challenge of Tier 1, Tier 2 and Tier 3 risk registers by checking risk descriptions, risk causes, consequences, ratings, controls, mitigation plans, risk movements, action owners and target dates.

• Coordinate risk assessments, risk deep dives, workshops, horizon scanning and external risk landscape reviews to support early warning, management visibility and decision-making.

• Develop, update and monitor KRIs, dashboards, escalation thresholds and risk appetite indicators for material risks, including risk movements and emerging exposures.

• Support review and challenge of major projects, investments, new hospital or tower projects, renovations, acquisitions, divestments and strategic initiatives by assessing risk assumptions, investment exposure, scenario analysis, sensitivity analysis, dependencies and mitigation plans.

• Prepare flash risk updates or emerging risk alerts where material external developments may affect KPJ’s strategy, operations, reputation, financial performance or resilience.

• Collaborate with IT/Digital, Clinical, Legal, Finance, Procurement, Sustainability, Compliance, Integrity and Internal Audit on cross-functional risk matters, including cyber, data breach, clinical, regulatory, procurement, ESG and reputational exposures.

C. Insurance Programme Management and Renewal Support

• Support end-to-end management of the Group insurance programme, including general insurance, cyber security, medical malpractice, directors and officers liability, business travel and other relevant policies.

• Maintain accurate insurance policy schedules, including policy period, broker, insurer/takaful operator, sums insured, policy limits, premiums, deductibles, sub-limits, exclusions, warranties, endorsements, certificates of insurance and renewal milestones.

• Coordinate insurance renewal activities, including renewal questionnaires, underwriting information, asset and exposure declarations, claims experience, technical evaluation inputs, tender documentation, approval papers and renewal action trackers.

• Support review of insurance adequacy by analysing coverage requirements, policy limits, uninsured exposures, premium movements, claims history, loss trends, risk improvement requirements and emerging coverage gaps.

• Coordinate with brokers, insurers, takaful operators, consultants and internal stakeholders on policy placement, renewal queries, technical underwriting questions, declarations, endorsements and renewal documentation.

• Track key insurance governance and approval requirements, including tender timelines, technical evaluations, management approvals and any Group/JCorp-related governance requirements, where applicable.

• Support benchmarking and analysis of insurance cost, premium rate movements, coverage structure, deductibles, limits and risk financing options, including self-retention, captive feasibility, risk pooling or takaful structures, where relevant and approved by Management.

D. Claims Monitoring, Loss Experience and Risk Improvement

• Maintain claims registers and dashboards for relevant policies, including medical malpractice, general/property, liability, cyber, D&O, business travel and other insurance lines.

• Coordinate timely notification and documentation of claims or potential claims, including incident details, supporting documents, policy references, broker/insurer correspondence, reserves, settlement status and closure evidence.

• Monitor high-risk medical malpractice cases, major claims, sentinel or major incidents and other loss events with potential financial, insurance, reputational or medico-legal implications in collaboration with Clinical, Legal, hospitals, brokers and insurers.

• Analyse claims trends, recurring loss themes, outstanding claims, rejected claims, deductibles, uninsured losses and risk improvement recommendations to support management action and renewal negotiations.

• Facilitate post-claim and loss-event reviews with relevant stakeholders to translate claims experience into control enhancement, loss prevention, risk improvement and organisational learning.

E. Data Quality, Assurance, Capability Development and Stakeholder Engagement

• Conduct periodic quality checks on risk registers, insurance schedules, declarations, claims data, action trackers and dashboards to improve accuracy, consistency and decision-usefulness of information.

• Use data, trends, claims experience, incident information, audit findings and external developments to support early warning, escalation and management decision-making.

• Lead or support training, outreach and engagement sessions to strengthen ERM, insurance awareness, claims notification discipline, risk appetite understanding and escalation practices across RCOs, HQ functions and operating entities.

• Mentor junior team members and risk practitioners through structured guidance, review sessions, knowledge sharing and practical toolkits.

• Represent or support the ERM & IM function in internal and external engagements with Johor Corporation, brokers, insurers, takaful operators, consultants, auditors, regulators or professional bodies, where authorised.

• Perform any other risk, insurance, governance or strategic assignments as directed by the DGM, ERM & IM and/or CRSO.

JOB REQUIREMENT

Education:

• Bachelor’s Degree in Risk Management, Business Administration, Finance, Accounting, Actuarial Science, Insurance, Healthcare Management, Engineering, Law, Information Technology or any related discipline.

• Professional certification or training in Enterprise Risk Management, ISO 31000, insurance/risk financing, claims management, internal controls, project management, healthcare quality or governance is preferred. Knowledge and Experience:

• Preferably 6 to 8 years of relevant experience in enterprise risk management, insurance management, risk financing, claims management, governance, audit, compliance, healthcare operations, finance, legal or related fields.

• Good working knowledge of ERM processes, risk registers, KRIs, risk appetite, committee reporting, risk dashboards, action trackers and governance follow-through.

• Good technical understanding of insurance management, including policy schedules, sums insured, limits, deductibles, exclusions, warranties, endorsements, certificates of insurance, renewal documentation and claims handling.

• Exposure to multiple insurance lines such as general/property, medical malpractice, cyber, directors and officers liability, business travel, liability and employee-related policies would be an added advantage.

• Experience coordinating with brokers, insurers, takaful operators, consultants and internal stakeholders on renewals, tenders, technical evaluation inputs, claims, underwriting information and risk improvement requirements.

• Exposure to Board, Management or senior leadership reporting, including the ability to translate technical risk and insurance matters into clear management insights and decision-support recommendations.

Skills & Competencies:

• Strong analytical, financial and commercial acumen with ability to link risk, insurance, claims, resilience and operational performance.

• Ability to review and challenge risk ratings, mitigation plans, control effectiveness, insurance adequacy, claims trends and escalation requirements with sound professional judgement.

• Strong documentation discipline and ability to maintain accurate insurance schedules, claims trackers, renewal trackers, risk registers, dashboards and committee papers.

• Excellent written communication, report writing, presentation and facilitation skills for senior audiences.

• Strong project coordination, governance discipline, follow-through and ability to drive closure of action plans.

• Ability to engage hospitals, support companies, HQ functions, brokers, insurers and other stakeholders professionally and constructively. Special skills required:

• Able to interpret insurance policy information, renewal requirements, claim documents, underwriting queries, policy limits and exclusions sufficiently to coordinate technical insurance matters effectively.

• Able to design and facilitate ERM and insurance workshops, renewal data gathering sessions, risk exercises and capability-building sessions.

• Able to use data, trends, claims experience and risk insights to support early warning, escalation and management decision-making.

• Familiar with risk management standards and good practices, including ISO 31000 and relevant insurance/risk financing principles. Personal attributes:

• Accountable, mature and able to operate with minimal supervision.

• Proactive, analytical, structured and solutions-oriented.

• High integrity, sound judgement and strong sense of confidentiality.

• Detail-oriented, especially in handling policy schedules, claims information, financial data and committee documentation.

• Confident, credible and able to engage senior stakeholders and external insurance parties professionally.

• Collaborative team player with strong coaching and influencing ability.

• Resilient under pressure and able to manage multiple renewal deadlines, reporting cycles and strict timelines.