ANNEX "A" - STATEMENT OF WORK1. TitleRisk Management Specialist2. ObjectiveProvide support to Marine Atlantic’s Risk Department in its efforts to establish a Divisional levelRisk Process that aligns with its existing Enterprise Risk Management Framework.3. BackgroundImplementation of a Divisional level Risk Management process is an important next step inMarine Atlantic’s journey of ERM maturity. This will have a significant impact on our ability toembed a Risk culture as well as increase the Corporation’s capacity for success in theachievement of its strategic objectives.4. Scope of ServicesStream 3: Risk Management SpecialistIntermediate: 5 - < 10 years of experienceThe required services may include, but are not limited to the following:• Conducting risk assessments and evaluating potential risk and losses• Assisting in prioritization and assignment of risks• Coaching, mentoring and training project teams in risk mitigation techniques• Documenting process improvements• Preparing reports for internal or external publication (Corporate Services, Policy,Communications)• Liaising with and interviewing stakeholders, as required, to obtain, clarify and exchangeinformation, in-order to co-ordinate and manage the Risk Assessment Process• Identifying, confirming and documenting the objectives and priorities specific to theprocess, project, program or strategic direction being assessed, feasibility studies• Identifying relevant risks and opportunities (including, but not limited to, economic,political, operational, legal, reputation, technical, organizational, accounting, banking andsocial risks) that threaten the objectives and priorities• Utilizing both quantitative and qualitative techniques, as appropriate, to assess thelikelihood that a risk event will occur/or the impact if the risk event occurs• Recommending and documenting suggested Risk Responses necessary to manage thelikelihood and/or impact of the identified risks• Performing Control Risk Assessments and analysis, which may include statisticalsampling and analysis of existing controls• Assisting with the on-going monitoring of risk and assisting with the implementation ofrisk response/mitigation strategies• Preparing draft and finalized risk assessments, briefing notes, presentations and papersrelated to risk management, and developing and updating risk management plans• Providing advice with respect to risk management best practices and providing guidanceand direction to assist in managing risk
DeliverablesActivities include:• Supporting the Corporation’s Risk Officer with the roll out of a Divisional risk processusing the existing ERM Framework. This support will encompass the following activities:• Identification of the “top” risks for each Division based on their core business activities• Conducting risk assessments for each Division’s top risks• Identification of existing controls and additional activities required to further mitigate therisks• Identification of risk metrics for each Division• Development, facilitation, and capturing of outputs of Divisional Risk workshops• Liaising with and interviewing stakeholders to identify risks and validate information• Providing guidance, coaching for Directors/Managers and their respective teams in thecreation of the risk registers• Preparing draft and finalized documents relative to the roll out of the process as required(i.e., Risk registers, briefing notes, presentations, communiques etc.)• Creation and establishment of quarterly reporting requirements• Development of formal Divisional risk tools and templates for reporting• Organizing Divisional space on the Corporation’s Internal information managementsystem• Development of a detailed active process for Divisions to use in the management of riskincluding a calendar of activities/Divisional workflow• Delivery of sessions with a consultative component to solidify the risk managementactive process before finalizing• Facilitating understanding of the linkages to the Corporate level Risks• Expansion of ERM guide to capture Divisional process and convert it to electronic formatwith hyperlinks to tools and templates• Establishment of a Director level committee including terms of reference for riskmanagement at the Divisional level5. Official LanguagesAll work to be performed and written in English.6. Work LocationThe onsite location for this project is the Port Aux Basques office located at: 239 Grand BayRoad, Port Aux Basques, Newfoundland, A0M 1C0. However, the location of the work willdepend on the nature of specific deliverable listed above. It is estimated that the majority ofwork can be done remotely but that the Risk Management Specialist will need to be flexible totravel as required to the onsite location, as well as to St. John’s Newfoundland and NorthSydney, Nova Scotia.
