Expert Enterprise Risk Management (ERM)

Responsibilities

The scope of the assignment is the independent provision of consulting and project services in the area of Enterprise Risk Management (ERM) for the Heraeus Group. The objective is to create the consolidated group risk report as of April 2027, including the necessary risk survey and consolidation, conducting risk-related workshops with the Operating Companies (OpCos), professional harmonization of risk registers, further development of the risk management methodology, and professional support for the introduction of a new ERM tool.

The services are to be provided as professionally independent consulting and project services. The subject of the assignment are the work results described below.

Scope of Services

Work Result

Project No.:

1084543

Project Title:

1084543 Expert Enterprise Risk Management (ERM)

Job Type:

Freelance

• Creation of the Group Risk Report
• Conducting the risk survey and consolidation of risk information provided by the Operating Companies (OpCos) and regions in accordance with the existing Enterprise Risk Management process.
• Professional plausibility and quality check of the provided risk information regarding completeness, assessment consistency, and possible duplicate entries based on the existing risk assessment methodology.
• Conducting a group-wide risk consolidation, including aggregation of individual risks, to create a consolidated risk perspective.
• Creation of the group risk report as of April 2027, including management summary, risk overview, analysis of significant developments, and required report content, using existing reporting standards.
• Consolidated Group Risk Report April 2027
• Documented Risk Consolidation
• Management Summary
• Preparation and Execution of Risk Workshops
• Independent conception, preparation, and organization of risk workshops with the Operating Companies designated by the client.
• Creation of the necessary workshop documents, moderation concepts, and presentation materials for the structured identification and assessment of risks.
• Execution and moderation of the agreed-upon workshops, including structured recording of results.
• Documentation and summarization of identified risks, assessments, and recommendations for action.
• Workshop Documents
• Conducted Risk Workshops
• Result Minutes
• Documented Risk Assessments
• Harmonization of Risk Registers
• Analysis and comparison of the risk registers of central functions and operating companies regarding overlaps, assessment differences, and possible duplicate entries.
• Documentation of identified discrepancies, including professional assessment of the impact.
• Development of a consolidated proposal for harmonization and professional assignment of identified risks.
• Documented Gap Analysis
• Comparison list of identified discrepancies
• Harmonization proposal for risk assignment and assessment
• Professional Further Development of the Enterprise Risk Management System
• Analysis of the existing risk management methodology, including assessment logic, risk categories, and Key Risk Indicators (KRIs), taking into account recognized standards and best practices.
• Development of written optimization and further development proposals, including presentation of professional impacts on processes, reports, and control mechanisms.
• Creation of a professional draft for updating relevant methodology and governance documents.
• Creation of professional requirement specifications for necessary adjustments to the ERM tool resulting from recommended methodology changes.
• Analysis Report
• Methodology Recommendations
• Draft of Updated Governance Documentation
• Professional Requirement Specification
• Professional Consulting Services in the Framework of Introducing a New ERM Tool
• Creation and updating of a professional planning concept for the introduction of the ERM tool, including description of work packages, professional dependencies, milestones, and identified risks.
• Analysis of project progress from a professional perspective, as well as creation of status assessments, risk assessments, and recommendations for action for the client.
• Creation of a professional migration concept for transferring existing risk data to the target system, including definition of professional assignment, quality, and validation criteria.
• Professional analysis and documentation of requirements for data migration, as well as development of recommendations for implementation and quality assurance.
• Creation of professional test and validation concepts, including definition of suitable test cases and professional acceptance criteria.
• Execution of professional reviews of the provided test results, as well as documentation of identified discrepancies, risks, and optimization potentials.
• Professional consulting of project participants on risk management-related requirements, as well as development of corresponding decision and action templates.
• Analysis of project-relevant risks in connection with the introduction of the ERM tool and creation of written recommendations for their treatment and control.
• Professional Planning Concept
• Status and Risk Analyses
• Professional Migration Concept
• Documented Migration and Quality Requirements
• Professional Test and Validation Concept
• Review and Assessment Documentation
• Decision and Action Templates
• Documented Recommendations for Action for Project Execution

Requirements

Several years of professional experience in Enterprise Risk Management (ERM), risk controlling, or corporate governance

Additional Information:

SOLCOM is one of the leading technology service providers in the areas of software development, IT, and engineering. For over 20 years, we have been working as partners with globally operating top companies in all industries and are deployed worldwide wherever innovation is decisive.

• Profound knowledge of common risk management standards and frameworks (e.g., COSO ERM, ISO 31000)
• Experience in conducting group-wide risk surveys and risk consolidations
• Demonstrable experience in creating risk and management reports at the company or group level
• Experience in moderating and conducting risk workshops with business units and management stakeholders
• Knowledge in the development and further development of risk assessment methods, risk categories, and Key Risk Indicators (KRIs)
• Experience in reconciling and harmonizing risk registers from different organizational units
• Experience in transformation or implementation projects in the area of Governance, Risk & Compliance (GRC) or Enterprise Risk Management
• Experience in professional support or implementation of ERM or GRC systems is an advantage
• Experience in the professional creation of requirement specifications, test concepts, and acceptance documentation
• Confident use of MS Office, especially Excel and PowerPoint
• Experience with Risk Management, GRC, or ERM systems
• Knowledge of reporting and analysis tools is an advantage
• Very good written and spoken German and English skills

Project details

Hanau

2026-10-26

6 months

• Start: flexible
• Duration: 6 Monate
• Remote: onsite
• Location: Hanau, Deutschland, DE
• Languages: German