Expert Enterprise Risk Management (ERM)

Project overview

The subject of the contract is the independent provision of consulting and project services in the area of Enterprise Risk Management (ERM) for the Heraeus Group. The goal is the creation of the consolidated group risk report as of April 2027, including the necessary risk assessment and consolidation, conducting risk-related workshops with the Operating Companies (OpCos), harmonizing risk registers, further developing the risk management methodology, and providing expert support for the introduction of a new ERM tool.

The services will be provided as independent consulting and project services. The subject of the contract are the work results described below.

Scope of Services

Work Results

• Creation of the Group Risk Report
• Conducting risk assessment and consolidation of risk information provided by the Operating Companies (OpCos) and regions in accordance with the existing Enterprise Risk Management process.
• Professional plausibility and quality check of the provided risk information regarding completeness, consistency of assessment, and possible duplicate entries based on the existing risk assessment methodology.
• Conducting a group-wide risk consolidation, including aggregation of individual risks, to create a consolidated risk view.
• Creation of the group risk report as of April 2027, including management summary, risk overview, analysis of significant developments, and required report content, using existing reporting standards.
• Consolidated Group Risk Report April 2027
• Documented risk consolidation
• Management Summary
• Preparation and Execution of Risk Workshops
• Independent conception, preparation, and organization of risk workshops with the Operating Companies designated by the client.
• Creation of the necessary workshop documents, moderation concepts, and presentation materials for structured identification and assessment of risks.
• Conducting and moderating the agreed workshops, including structured recording of results.
• Documentation and summarization of identified risks, assessments, and recommendations for action.
• Workshop documents
• Conducted risk workshops
• Result minutes
• Documented risk assessments
• Harmonization of Risk Registers
• Analysis and comparison of risk registers of central functions and operating companies regarding overlaps, assessment differences, and possible duplicate entries.
• Documentation of identified deviations, including professional assessment of their impact.
• Development of a consolidated proposal for harmonization and professional assignment of identified risks.
• Documented gap analysis
• Comparison list of identified deviations
• Harmonization proposal for risk assignment and assessment
• Professional Further Development of the Enterprise Risk Management System
• Analysis of the existing risk management methodology, including assessment logic, risk categories, and Key Risk Indicators (KRIs), considering recognized standards and best practices.
• Development of written optimization and further development proposals, including presentation of professional impacts on processes, reports, and control mechanisms.
• Creation of a professional draft for updating relevant methodology and governance documents.
• Creation of professional requirement specifications for necessary adjustments to the ERM tool resulting from recommended methodology changes.
• Analysis report
• Methodology recommendations
• Draft of updated governance documentation
• Professional requirement specification
• Professional Consulting Services in the Framework of Introducing a New ERM Tool
• Creation and updating of a professional planning concept for the introduction of the ERM tool, including description of work packages, professional dependencies, milestones, and identified risks.
• Analysis of project progress from a professional perspective and creation of status assessments, risk assessments, and recommendations for action for the client.
• Creation of a professional migration concept for transferring existing risk data to the target system, including definition of professional assignment, quality, and validation criteria.
• Professional analysis and documentation of requirements for data migration and development of recommendations for implementation and quality assurance.
• Creation of professional test and validation concepts, including definition of suitable test cases and professional acceptance criteria.
• Conducting professional reviews of the provided test results and documentation of identified deviations, risks, and optimization potentials.
• Professional consulting of project participants on risk management-related requirements and development of corresponding decision and action templates.
• Analysis of project-related risks in connection with the introduction of the ERM tool and creation of written recommendations for their treatment and control.
• Professional planning concept
• Status and risk analyses
• Professional migration concept
• Documented migration and quality requirements
• Professional test and validation concept
• Review and assessment documentation
• Decision and action templates
• Documented recommendations for action for project execution

Requirements

Additional Information:

Project No.: 1084543

Job Type: Location: Start: 10/26/2026 Duration: 6 months

• Several years of professional experience in Enterprise Risk Management (ERM), Risk Controlling, or Corporate Governance
• Profound knowledge of common risk management standards and frameworks (e.g., COSO ERM, ISO 31000)
• Experience in conducting group-wide risk assessments and risk consolidations
• Demonstrable experience in creating risk and management reports at company or group level
• Experience in moderating and conducting risk workshops with specialist departments and management stakeholders
• Knowledge in the development and further development of risk assessment methods, risk categories, and Key Risk Indicators (KRIs)
• Experience in comparing and harmonizing risk registers from different organizational units
• Experience in transformation or implementation projects in the Governance, Risk & Compliance (GRC) or Enterprise Risk Management environment
• Experience in professional support or introduction of ERM or GRC systems is an advantage
• Experience in the professional creation of requirement specifications, test concepts, and acceptance documentation
• Confident use of MS Office, especially Excel and PowerPoint
• Experience with Risk Management, GRC, or ERM systems
• Knowledge of reporting and analysis tools is an advantage
• Very good German and English language skills, spoken and written

Project details

• Start: 26.10.2026
• Duration: 6 Monate
• Location: DE
• Languages: German