Gracia Bongi Skosana

Houston, Texas ***** 1-346-***-****

ad11cc@r.postjobfree.com

PROFESSIONAL

SUMMARY

Knowledgeable Senior Risk Manager with over 24 years of experience in Enterprise Risk Management, Compliance; Business Continuity, Fraud Analysis and Prevention, Forensic Investigation, Safety; Contract Management; Project Management, Finance, Annual Insurance Renewal for various policy & Corporate Governance. Equipped with strategic planning and program leadership abilities honed in Private and Public industry environments. Proficient in setting in place strong and successful policies to mitigate risk at each level and establish clear procedures for risk assessments, prevention and containment. Familiar with regulatory requirements and able to maintain strict controls. SKILLS

• Microsoft Office

• Risk mitigation

• Data analysis

• Exposure Assessment

• Root Cause Analysis

• Anti- Fraud and Prevention

Strategy

• Underwriting

• Business Continuity Management

• Claim Reviews

• Trend Analysis

• Occupational Health and Safety

• Loss Prevention Programs

• Insurance Management

• Compliance

• Workman’s Compensation

WORK HISTORY

ENTERPRISE RISK MANAGER 04/2018 to 09/ 2023

Mhlathuze Water Richards Bay, Kwazulu-Natal, South Africa

• Partner with leaders in Strategic Planning Office, Operational and Maintenance unit, Legal & Compliance unit, Finance/ Credit unit, Technical Services unit, Scientific Services unit, Human Resources unit, Information Security unit, and business areas to improve effectiveness and efficiency of risk management activities.

• Developed and implemented Enterprise Risk Management (ERM) Framework in order to establish an effective risk-based system to identify, measure, monitor, and control enterprise-wide risks.

• Facilitates annual insurance renewal for the entire organization through brokerage service provider.

• Workman’s Compensation insurance/claims

• Asset all risks insurance and claims.

• Ensure sufficient self-insurance fund is available for self-funded risks.

• Perform annual Insurance risk assessment and provide advice to management on insured and uninsured risk and provide options available based on assessment.

• Developed and implemented Anti- Fraud and Prevention Strategy; Policies and Plans to raise awareness amongst staff that response plans have been devised, to deal with and minimize the damage caused by any fraudulent attack. By explicitly defining actions that constitute fraud to ensure that all employees and third parties are aware of what is and is not acceptable.

• Developed mechanism to ensure that organization’s policies and procedures comply with regulatory and ethical standards through performing regular audits, implementing company policies, and design control systems.

• Developed and controlled execution of reporting and analytics for multiple operations departments.

• Established strategy for operations reporting and analytics, identifying key needs for deliverables while driving continuous improvement of processes.

• Identified and work with Managers to create practices and procedures that ensure risks are managed effectively from insurance viewpoint. Keep procedures up-to-date and ensure appropriate people are aware and able to follow procedures as appropriate.

• Organizational Insurance Management according to internal risk management policies, keeping liability minimized by leveraging expertise and available tools.

• Designed and monitored underwriting scorecards and related predictability.

• Instituted contingency plans, ensuring business continuity through cross- training, documentation, and data backups.

• Promoted enterprise-level risk management practices and helped instill strong culture focused on protective policies and procedures.

• Taught employees how to control risks at front line, including how to interpret and apply sound policies.

• Advised senior managers on policy strategies for reducing liability and preventing losses.

• Developed and implemented Anti-Fraud and Prevention Strategy and Plan to identify a high-level proposal on how an organization should implement its fraud prevention policy in the presence of its internal and external influences. The strategy forms the most important part of the fraud deterrence strategy; thus, the policy is straightforward and

• Investigated allegations to check validity and recommend actions to minimize risk.

• Analyzed portfolios and identified risk factors, facilitating reduction of delinquencies on new volumes, and recommending risk-adverse underwriting strategies.

• Built and harmonized operations report for team leaders, senior managers and executives, supervising automation of reports and data sources to eliminate errors.

• Administered combine assurance program, keeping risk low by proactively examining processes and related documentation.

• Developed short-term goals and long-term strategic plans to improve risk control and mitigation.

• Development Business Continuity Management system (roadmaps ; Strategy; Plan and Business Impact Analysis) to achieve risk maturity milestones across organizational levels.

• Collaborated with SHEQ unit to kept operations in compliance with Occupational Safety and Health Administration (OSHA) through regular safety inspections and hazards management strategies.

• Trained and mentored Risk Management Champions to assist Risk Management culture and monitor implementation of Risk Management mitigation Strategies.

• Collaborated on implementation of collection strategies with collections, risk and fraud teams.

• Employed strong program management skills to successfully define and manage ongoing initiatives designed to control Strategic, Operational and Fraud risks.

• Encouraged stakeholders to approach assessments analytically and offer unique insights to bring new understanding to risk management programs.

• Developed, defined and maintain policies and SOPs for ERM framework components (risk registers, Risk Appetite and Tolerance, incident management, etc)

DIRECTOR OF RISK MANAGEMENT 01/2016 to 02/2019

Musikamhlanga Risk and Bus Solutions (Consultants) Durban, Kwazulu- Natal, South Africa

• Developed and implemented Enterprise Risk Management (ERM) Framework in order to establish an effective risk based system to identify, measure, monitor, and control enterprise-wide risks.

• Advised Senior Managers on policy strategies for reducing liability and preventing losses.

• Promoted enterprise-level risk management practices and helped instill strong culture focused on protective policies and procedures.

• Reviewed contracts and agreements to identify potential risks and ideal mitigation strategies.

• Instituted contingency plans, ensuring business continuity through cross- training, documentation and data backups.

• Developed short-term goals and long-term strategic plans to improve risk control and mitigation.

• Collaborated with IT Managers to analyzed impact of environmental disasters to physical data centers and create and implement response plans.

• Developed and implemented Anti- Fraud and Prevention Strategy; Policies and Plans to raise awareness amongst staff that response plans have been devised, to deal with and minimize the damage caused by any fraudulent attack. By explicitly defining actions that constitute fraud to ensure that all employees and third parties are aware of what is and is not acceptable.

• Developed mechanism to ensure that organization’s policies and procedures comply with regulatory and ethical standards through performing regular audits, implement company policies, and design control systems.

• Developed and trained employees from various organizations how to control risks at front line, including how to interpret and apply sound policies.

• Developed and implemented Anti-Fraud and Prevention Strategy and Plan to identify a high-level proposal on how an organization should implement its fraud prevention policy in the presence of its internal and external influences.

• Performed Ad Hoc Forensic Investigations on allegations made to check veracity and issued reports with recommended actions to minimize risk and or further actions where required.

• Developed and controlled execution of reporting and analytics for multiple operations departments.

• Developed and Implemented Enterprise Risk Management and Business Continuity roadmaps to achieve risk maturity and Business Continuity milestones across organizational levels.

• Developed and Administered Combined Assurance programs, keeping risk low by proactively examining processes and related documentation.

• Encouraged stakeholders to approach assessments analytically and offer unique insights to bring new understanding to risk management programs.

• Engaged with collections, risk, and fraud teams, collaborating on implementation of collection strategies.

• Developed and Implemented Fraud Prevention Strategies (Policies; Procedures and Plans and administered Tip off/ hotline reports

• Built and harmonized operations report for team leaders, senior managers, and executives, supervising automation of reports and data sources to eliminate errors.

• Trained and mentored Risk Management Champions; Business Continuity and Combined Assurance Champions.

• Analyzed portfolios and identified risk factors, facilitating reduction of delinquencies on new volumes, and recommending risk-adverse underwriting strategies.

• Facilitate Risk assessment workshops, analysis and evaluated business processes management activities of business systems. to identify risks levels.

• Assisted organization internal audit teams to draft annual Internal Audit Risk Based Plan.

• Developed risk metrics and generate risk reports to management for review and establish new methodologies to improve risk management efficiency.

• Assisted in setting Risk Management Committees and functioning for various organizations.

• Performed services of Management of organization insurance Portfolios, from annual insurance renewal to management of claims.

·

ENTERPRISE RISK MANAGER 07/2009 to 12/2015

Richards Bay Coal Terminal Port of Richards Bay, KwaZulu Natal, South Africa

• Development and implemented Risk Management Framework and strategic risk management initiatives through development of Strategy, Policies and Procedures

• Performed risk assessments, by Identifying highlight risk areas with management team and Board.

• Analyzed, evaluated, and recommended risk treatment plans on identified risks.

• Prepared and enforced policies to establish culture of health and safety.

• Monitored compliance with policies and laws by inspecting employees and operations.

• Developed and implemented Anti- Fraud and Prevention Strategy; Policies and Plans to raise awareness amongst staff that response plans have been devised, to deal with and minimize the damage caused by any fraudulent attack. By explicitly defining actions that constitute fraud to ensure that all employees and third parties are aware of what is and is not acceptable.

• Developed mechanism to ensure that organization’s policies and procedures comply with regulatory and ethical standards through performing regular audits, implementing company policies, and design control systems.

• Ensured Financing of risk (making sufficient provision to fund loss should it occur via insurance / self-funding mechanisms)

• Facilitated annual risk assessments (i.e. Strategic, Operational, Fraud, emerging risks, and project risks)

• Established and trained risk management champions.

• Together with CEO, GM Finance and GM Risk and Compliance analyzed Whistle-blower/ Tip Off investigations and make decision on way forward.

• Conducted awareness to employees and service providers of organization on relevant Policies (i.e. Ethics, Integrated Business, Anti- Fraud and Corruption, etc.)

• Monitor Key Risks and constant liaison with EXCO regarding progress on implementation of mitigation strategies regarding items identified on key risks.

• Assisted Board to developed the Risk Appetite and Tolerance of the organization.

• Developed and implemented Business Continuity Management Strategy, Policy and Plan.

• Provided guidance to Business Continuity Management and Disaster Recovery Plan Teams on implementation of BCM and DRP Strategies.

• Administration of Risk Management systems (i.e. CURA and Teammate and training of CURA / Teammate users

• Maintained full knowledge of current regulatory environment and made proactive adjustments to meet changing requirements.

• Oversaw all reporting, documentation and recordkeeping requirements for department.

• Investigated and evaluated customers for creditworthiness and potential risk factors.

• Managed Insurance portfolio including self insurance, mitigation strategies.

• Worked with General Manager Finance and GM Risk and Compliance on technical areas and projects.

• Provided accurate and cost-effective calculations and input into ad-hoc feasibility studies, tender evaluations, lease negotiations and costing exercises.

• Monitored compliance with Richards Bay Coal Terminal Quality Management System policies.

• Ensured that risk management and related activities are directed towards productivity, cost consciousness, quality and safety objectives.

• Administered Shareholders programme for shipment of coal around the globe.

• Ensured Compliance on Risk, Internal Audit and Forensic standards and other prescripts

• Participated in team-building activities to enhance working relationships.

• Maintained energy and enthusiasm in fast-paced environment

• Improved operations through consistent hard work and dedication

• Participated in team-building activities to enhance working relationships

• Led projects and analyzed data to identify opportunities for improvement

• Offered friendly and efficient service to customers, handled challenging situations with ease

• Managed team of employees, overseeing hiring, training and professional growth of employees

• Exceeded goals through effective task prioritization and great work ethic

• Demonstrated respect, friendliness and willingness to help wherever needed

SENIOR INTERNAL AUDITOR 05/2007 to 06/2009

Richards Bay Coal Terminal Port of Richards Bay, Kwazulu-Natal, South Africa

• Under direction of Director of Internal Audit and Risk Management, performs internal audits and activities in compliance with established guidelines and principles of auditing by understanding and documenting business processes, interpreting organization's policies and procedures, governance practices, and regulatory obligations, evaluating compliance with laws, policies, procedures, and regulation by comparing operating practices with established norms, and supporting safeguarding of assets by reviewing internal controls over those assets and verifying existence of such assets.

• Led audit cycle by checking tax compliance, verifying financial records, inspecting accounts, Health and Safety and Operational.

• Analyzed results of audit and presenting possible solutions for ineffective financial practices to management.

• Evaluated company procedures, payroll, inventory, and tax statements, Operations, Technical Services, Health and Safety, Compliance, Engineering and Maintenance to guide financial policy making.

• Conducted risk assessments to recommend aversion measures and cost savings.

• Followed up with management to ensure remediation action are implemented into company's audit findings.

• Supervising junior auditing personnel and implementing their research work into auditing process.

• Preparing and reviewing annual audit memorandums.

• Researching applicable and regulations to ensure company's books are compliant.

• Documented three year rolling internal audit plan and annual risk based audit plans.

• Executed annual Internal audit projects as per approved plan by Audit and Risk Committee.

• Performed Ad-Hoc forensic investigation and issued reports with recommendations.

• Participated in departmental and employee education in areas of internal controls and policy and in monitoring audit actions taken by management .

• Contributed to overall success of the organization by working as team member on audits and special projects and performing all other duties and responsibilities as assigned.

• Managed resources and audit assignments.

• Ensured that completed, accurate and timely audit information is reported to Management and/or Risk Committees.

• Reviewed Internal Audit work for auditors

• Provided Internal Audit training to trainee Internal Auditors

• Explained risk and compliance concepts to managers and executives

• Handled all major risks in collaboration with management

• Trained newly hired employees on company processes, procedures and deadlines

• Created and delivered risk management presentations to key decision- makers

• Coordinated with external auditors and documented process reviews

• Produced audit reports

• Documented auditing information utilizing corporate system

• Reviewed and identified risks, analyzed controls and tested compliance

• Handled supervisor duties when manager was unavailable or out of office RISK AND COMPLIANCE MANAGER 02/2002 to 04/2006

SBTR Consultants Durban, KwaZulu Natal,South Africa RISK MANAGEMENT DUTIES:

• Served as subject matter expert by advising staff and customers and working directly with external agencies throughout audits or to remedy compliance issues.

• Directed and implemented strategic improvement plans to integrate solutions to audit findings and workflow process issues.

• Identified deficiencies, discrepancies, misinformation and compliance issues on various documentation in order to determine ineligibility or acceptance status and return non-compliant packages to teams for resolution.

• Monitored closing disclosures to verify documents contained required signatures.

• Developed Enterprise Risk Management Frameworks and Policies for various Companies

• Guided integration of enterprise risk management with other organizational planning and management activities.

• Liaise with departmental heads in ensuring completion of quality departmental risk registers

• Identified training needs for risk management and oversee development of enterprise risk competence and awareness across companies

• Evaluated adequacy of companies internal control framework in addressing risks and accomplishing companies goals and objectives;

• Issued reports for Boards, Council, Audit, Risk and Compliance committees in ensuring identification and prioritization of risks and reporting are communicated to oversight structures.

• Liaised with departments and division heads on adequacy of proposed actions in management of risk areas highlighted in internal audit reports.

• Monitored implementation of action plans to ensure risk mitigation efforts are proceeding as required.

• Identified emerging risks and reported same to relevant stakeholders.

• Developed risk management systems and train departmental risk champions on effective embedding of Risk Management culture.

• Reported to all governance structures (Boards, Council, Operations, Audit and Risk, Social and Ethics, Finance, Risk Management Committees)

• Any other duty assigned by Management as arises. COMPLIANCE DUTIES:

• Conducted and / directed investigation on compliance issues.

• Assessed product, operations to ascertain compliance with laws and regulations and developed risk mitigation strategies.

• Conducted environmental audits to ensure adherence to environmental standards.

• Identified compliance issues that required follow-up or investigations.

• Evaluated testing procedures to meet specifications of environmental monitoring programs.

• Assisted business to implement software tools to monitor and new updates on various prescribes and laws.

• Maintained documentation of compliance activities, such as complaints received or investigation outcomes.

• Consulted with corporate attorneys as necessary to address difficult legal issues

• Collaborated with human resources departments to ensure implementation of disciplinary action strategies were in compliance with law and not violated rights of employees.

• Conducted on compliance related topics, policies, procedures and laws.

• Prepared and presented comprehensive reports to upper management and audit team, covering issues and recommendations

• Drove optimization of regulatory risks management, control testing and process improvements

• Advised division leaders of regulatory risks in business processed and provided recommendations for improvement

• Liaised with clients to identify and target inefficiencies in areas of risks and business controls, process gaps and workflow discrepancies

• Delivered subject matter expertise for internal and external customers on compliance best practices and quality control

• Delivered and tracked program training for associates and supervisors to safeguard continuing business relationships

• Managed compliance efforts, reporting and audits

• Collaborated with HR and IT to develop and implement code of business and ethics and anti-harassment policies and related personnel training ACCOUNTANT 01/1998 to 12/2001

South African Sugar Association Durban, KwaZulu Natal, South Africa

• Gathered financial information, prepared documents and closed books.

• Prepared, examine, and analyze accounting records, financial statements, and other financial reports to assess accuracy, completeness, and conformance to reporting and procedural standards.

• Created budgets and forecasts for management group to meet regular accounting deadlines.

• Computed taxes owed and prepare tax returns, ensuring compliance with payment, reporting and other tax requirements.

• Analyzed business operations, trends, costs, revenues, financial commitments, and obligations, to project future revenues and expenses or to provide advice.

• Reported to management regarding status of finances in the business.

• Established tables of accounts, and assign entries to proper accounts

• Developed, maintain, and analyze budgets, preparing periodic reports that compare budgeted costs to actual costs.

• Developed, implement, modify, and document recordkeeping and accounting systems, making use of current computer technology.

• Prepared forms and manuals for accounting and bookkeeping personnel and direct their work activities.

• Represented company before taxing authorities.

• Appraised, evaluate, and inventory real property and equipment, recording information such as property's description, value, and location.

• Prepared reports for Monthly, Quarterly and annual reporting to all relevant structures

INTERNAL AUDITOR 02/1997 to 12/1998

Feltex Automative (PTY)LTD DURBAN, Kwa-Zulu Natal, South Africa

• Produced audit reports for submission to Senior Internal Auditor and advised on audit recommendations and internal controls.

• Performed internal audits of financial and departmental operations, and conducting process walkthrough for compliance with documented processes.

• Administered auditing program to address gaps and evaluate compliance with regulatory requirements.

• Explained risk and compliance concepts to managers and executives.

• Conducted timely implementation of compliance internal audits as directed by Senior Internal Auditor complying with annual audit plan.

• Performed audit projects and ensured to have initial focus on revenue assurance.

• Performed Control Self Assessment with Managers for various departments.

• Contributed to Office of Internal Oversight as well as Evaluation Services of internal audit of organization.

• Implemented internal audit tasks in areas of compliance and internal control.

• Performed all assigned audit assignment at financial, operational, project and administrative processes and systems

• .Evaluated internal audit suitability, efficiency, cost-effectiveness and internal controls effectiveness.

• Identify level of conformance with established rules, regulations, policies and procedures;

• Examined validity and reliability of financial, accounting and other data and report any deviations.

• Participated in audit engagement planning, reporting, scoping, execution and follow-up as defined.

• Evaluated comprehensive business processes and transactions to analyze productiveness of controls.

• Identified internal audit control environment enhancement opportunities.

• Conducted testing adhering with accreditation and varied regulatory requirements

• Supported development of internal audit programs for operational audits and special reviews etc.

EDUCATION

Post Graduate Program in Cyber Security IT And Risk Management Program Completion 01/2024

The University of Texas at Austin, Austin, TX

Bachelor of Science Accounting

University of South Africa, Johannesburg, South Africa 3 credits left to complete in 03/ 2024

Certificate in Enterprise Risk Management Risk Management GRADUATED 08/2012

Institute of Risk Management South Africa, Johannesburg, South Africa

• Part of the group that developed the Risk Management Qualification Standard: By Institution of Risk Management South Africa (IRMSA) National Diploma in Accounting Accounting And Business Management GRADUATED 12/2003

Durban University of Technology, Durban, South Africa

• Awarded: Study Bursary for three years

National Certificate in Business Education Business Education GRADUATED 12/1996

Natal Technikon, Durban, South Africa

• [College Debate Club ] Member

ADDITIONAL

INFORMATION

PROFESSIONAL MEMBERSHIP

1. Institute of Risk Management South Africa [IRMSA] 2. Institute of Directors in Southern Africa [IoDSA] OTHER COURSES ATTENDED

1. Development and Implementation of ISO 14001 (Environmental Management Systems)

2. OHSAS 18001 Occupational Health and Safety Management 3. Advanced Occupational Health and Safety Act for Managers 4. Behavior Based Safety

CURRENT ROLES:

1. Board Member - Industrial Development Zone

2. Chairperson of Audit; Risk and Performance Committee- Municipality OTHER PREVIOUS GOVERNANCE ROLES:

1. Chairperson of Risk Management Committee

2. Member of Audit and Risk Committees

3. Member of Performance Committees

4. Member of IT Governance Steering Committee

5. Member of Whistleblower/ Tip Offs Committee

6. United Nations Global Compact member representing principle 10 (Anti-Fraud and Corruption in Businesses)

7. Behavior Based Safety (BBS) Steering Committee Chairperson Insurance Companies Exposure with the following Brokers: 1. Glenrand MIB

2. Aon

3. Marksure

4. Marsh

5. Old Mutual

. 6. Standard Alliance

Contact this candidate