Apply now »

Senior GRC & Sustainability Officer

Date:  Nov 12, 2026
Location:  Karachi
Company:  Engro Fertilizers Limited

1.       Job Purpose

 

 

The purpose of this role is to maintain, consolidate and coordinate the Enterprise Risk Management (ERM) framework and related governance and internal control activities, ensuring that business risks, mitigation plans, control issues and improvement actions are accurately documented, reviewed and followed up. The role also supports business continuity preparedness, audit coordination and the tracking of Learn, Share, Improve (LSI) actions so that lessons from errors are translated into sustained improvements. It provides robust analysis, identifies material exposures and performance gaps, and develops evidence-based recommendations to support informed management decisions and the organization's governance, risk and sustainability objectives.

 

In Sustainability, the role coordinates ESG data collection and validation and prepares the Company’s sustainability report and related disclosures, including IFRS S1/S2, GRI, SASB and applicable SECP requirements.

 

2.       Key Accountabilities & Performance Indicators

 

Description

Performance Indicators

Governance | Business Continuity Planning (BCP):

The role maintains and updates the consolidated BCP, individual Business Impact Analysis (BIAs) of each department and coordinates BCP status reporting and activation support when required. It arranges training and simulation exercises in line with the approved schedule and records findings and required plan updates.

BCP documents, Key critical Processes & Personnel are kept current to improve preparedness for business disruptions.

Governance | Emerging risk monitoring and crisis management:

Monitor relevant global and emerging developments, assesses their potential implications for Pakistan and EFERT, prepares targeted briefings and supports maintenance of the crisis management framework. Monitoring is ongoing, while briefings and framework updates are prepared as needed and urgent matters are handled on an ad hoc basis. This enables timely awareness of developments and proportionate preparedness.

Relevant developments are screened and material implications and response options are communicated promptly. Crisis management framework information and contact details are kept current, and significant issues are escalated to the line manager.

Governance | SOP governance and archiving:

Maintain the SOP register, version control, approval records and document repository, and coordinates reviews and updates with process owners. Record management is ongoing, while reviews are completed according to the review schedule or when processes change. This ensures employees can access current, approved procedures and that an auditable record is retained.

The SOP register and repository are maintained and review dates and owners are recorded. Approved versions are archived, and overdue reviews are followed up with the relevant process owners.

Governance | Balance sheet review:

 Review of assigned balance sheet accounts, investigate unusual movements to understand if controls are effective. This activity is performed monthly or during each close cycle, in line with the Finance calendar.

Assigned reviews are completed within the agreed close timetable. Variances and reconciling items are documented, followed up with owners and escalated when they remain unresolved or require management attention.

Risk | Enterprise risk management and risk assessments:

Maintain and consolidates the enterprise risk register, coordinate inputs from risk owners, facilitate risk assessments and identify emerging concerns. The role also coordinates the assessment of sustainability and climate-related risks with relevant owners. Register maintenance is ongoing, with formal assessments refreshed according to the agreed schedule and when material changes arise. This provides a complete and current view of business exposures and supports risk-informed decisions.

The consolidated risk register is complete, accurate and updated with risk owners and mitigation actions. Assessment milestones are met, material changes are documented and significant emerging risks are escalated.

Risk | Risk mitigation plan reviews and follow-up:

The role coordinates formal reviews of mitigation plans with risk champions and risk owners twice a year and follows up on progress, delays and changes throughout the year. This work checks whether responses remain relevant and promotes accountability for agreed risk-mitigation actions.

Two formal review cycles are coordinated each year. Action owners, status, due dates and supporting evidence are recorded, and overdue or potentially ineffective actions are followed up and escalated.

Risk | Management Committee and BARC risk reporting:

Consolidation and preparation of major-risk inputs for Management Committee reporting and top-risk reporting for BARC in Q1 and Q3. Tracking and follow up on BARC risk-related comebacks and recommendations throughout the year. This provides decision-makers with a consistent view of priority risks and helps ensure that agreed recommendations receive appropriate attention.

Q1 and Q3 submissions are completed by the agreed deadlines and validated with risk owners. BARC comebacks and recommendations are logged, assigned, updated and followed up, with overdue items escalated.

Controls | Internal audit coordination and observation closure:

Support internal audit kick-off meetings, coordinate evidence and responses to critical audit observations, and follow up with process owners on agreed closure actions. Work is carried out according to the audit plan and observation deadlines, with additional urgent requests handled on an ad hoc basis. This supports effective assurance and timely remediation of control weaknesses.

Audit evidence and responses are coordinated within agreed timelines. Observations are recorded with owners and due dates, closure is supported by appropriate evidence, and overdue actions are escalated.

Controls | Control reviews and risk/control self-assessments: Facilitate control reviews and risk and control self-assessments, document control-design or effectiveness gaps, support root-cause analysis and records agreed remedial actions. Reviews are performed in line with the approved plan or when requested. This helps identify weaknesses before they lead to control failures and strengthens accountability for remediation.

Reviews and self-assessments are completed according to the approved plan. Control gaps, root causes and action plans are documented, assigned to owners and tracked, and significant weaknesses are escalated.

Controls | Learn, Share, Improve (LSI) tracking:

Maintain a central record of LSIs raised following errors or improvement events, record the lesson learned and agreed corrective or preventive actions, and tracks owners, due dates and implementation evidence. Tracking is ongoing, with individual cases recorded as errors or events occur. This converts lessons into practical improvements and helps prevent recurrence rather than simply recording an incident.

LSI cases are logged consistently with clear owners and due dates. Action status and evidence are updated, overdue actions are escalated, and repeat issues or patterns are highlighted where identified.

Sustainability | Reporting:

Coordinate and prepare the annual sustainability report in line with applicable reporting frameworks, including IFRS S1/S2, GRI, SASB and relevant SECP requirements. Consolidate inputs from business functions, validate disclosures and coordinate reviews to ensure complete, consistent and timely reporting.

Frequency: Annual reporting cycle, with ongoing preparation and follow-ups.

The sustainability report is completed and submitted for approval within agreed timelines, with required disclosures and supporting evidence.

Sustainability | ESG Data Governance and Solutions:

Coordinate the implementation and improvement of ESG data solutions by documenting reporting requirements, engaging relevant IT and business stakeholders, testing outputs and tracking implementation actions. This improves the efficiency, consistency and traceability of sustainability data management.

Frequency: Project-based or ad hoc during implementation, with ongoing monitoring after deployment.

Agreed implementation milestones are tracked, identified issues are followed up and reporting requirements are addressed.

Sustainability | Sustainability committee coordination:

Coordinate Sustainability Committee meetings by preparing agendas, consolidating presentations, documenting decisions and tracking action items with relevant stakeholders.

Frequency: As per the committee calendar; follow-ups are ongoing between meetings.

Meetings are supported with timely documentation, minutes and action trackers, and outstanding actions are followed up.

Sustainability | Sustainability Connects & Capability Building:

Coordinate awareness sessions and capability-building activities to improve employees' understanding of sustainability priorities, ESG reporting requirements and their responsibilities as data owners. This promotes stronger sustainability ownership across the organization.

Frequency: Periodic sessions and ad hoc activities based on identified needs.

Planned sessions are conducted, participation is tracked and feedback or identified capability gaps are addressed.

Sustainability | External Sustainability Awards & Participation:

Coordinate applications and submissions for relevant sustainability awards, assessments and external initiatives by collecting evidence, preparing responses and engaging internal stakeholders.

Frequency: Ad hoc, based on award calendars and participation opportunities.

Submissions are complete and accurate and are made within applicable deadlines.

Sustainability | SECP ESG Sustain Portal:

Coordinate the compilation, validation and submission of relevant sustainability information through the SECP ESG Sustain Portal, where applicable. This supports regulatory reporting compliance and consistency between portal submissions and the company's approved disclosures.

Frequency: Once a year

Required submissions are completed within applicable deadlines, with validation checks and supporting records maintained.

 

1.       Frameworks, Boundaries and Decision-Making Authority:

 

  • Maintain registers, trackers, evidence repositories and draft reports within approved templates and procedures.
  • Coordinate with risk owners, control owners, ESG data owners and auditors to request inputs, clarify evidence and follow up actions.
  • Perform initial data-quality checks, flag inconsistencies and propose corrections for owner validation.
  • Prepare BARC pack every 1st and 3rd quarter, audit responses, sustainability disclosures and briefing notes for manager review.
  • Escalate overdue actions, significant risk changes, control deficiencies, reporting inconsistencies and potential disclosure concerns to the line manager.
  • Assist in the preparation of sustainability reports, presentations, and proposals for stakeholders.
  • Support the implementation and monitoring of sustainability initiatives, ensuring compliance with relevant standards and certifications.
  • Escalate any crisis prepare a crisis plan and activate BCP as and when required.
  • Escalate material balance sheet discrepancies, unresolved reconciliation issues or suspected control weaknesses requiring management intervention.
  • Activation of BCP or crisis arrangements where the approved protocol requires authorization from a designated authority.

The role operates within approved company policies, procedures, reporting protocols and delegated authority. It reports to the Manager, Governance, Risk & Sustainability, and escalates material issues through the established reporting line.

 

2.       Communication and Working Relationships

    • Main internal stakeholders:
      • Finance and General Accounting: Coordinate assigned balance sheet reviews, obtain reconciliations and resolve documentation gaps.
      • Departmental BCP coordinators and process owners: Maintain departmental BIAs, update continuity documentation and coordinate exercises and SOP reviews.
      • Risk champions and risk owners across various divisions: Obtain mitigation updates, track agreed actions and maintain supporting evidence.
      • Internal Audit and process owners: Coordinate audit documentation, observation responses and closure evidence.
      • Control owners: Arrange control self-assessments, document findings and follow up on corrective actions.
      • ESG data owners across business functions: Collect sustainability data, validate submissions and resolve missing or inconsistent information.
      • IT and Digital teams: Coordinate requirements, testing and implementation actions for ESG data solutions.
      • Sustainability Committee members and relevant stakeholders: Coordinate meeting materials, minutes and action follow-ups.
    • Main external stakeholders:
      • External auditors or assurance providers: Coordinate assigned documentation and evidence requests through approved company channels.
      • External service providers: Provide relevant inputs and coordinate implementation or documentation requirements where assigned.
      • Regulatory portals and relevant external organizations: Support compilation and submission of information through authorized internal processes e.g. awards participation etc.

 

3.       Key Challenges

 

  • Consolidating enterprise risks across business functions and ensuring risk information is accurate, complete and updated within reporting timelines.
  • Coordinating with risk owners, risk champions and cross-functional stakeholders to obtain timely inputs, validate risk assessments and follow up on mitigation actions.
  • Translating complex risk information, emerging developments and sustainability-related risks into concise, actionable insights for senior management, the Management Committee and BARC.
  • Ensuring business continuity plans, departmental Business Impact Analyses (BIAs), SOPs and crisis management arrangements remain current and aligned with evolving business requirements.
  • Coordinating internal audit responses, control assessments and closure of audit observations while ensuring that root causes are addressed and corrective actions are implemented.
  • Tracking Learn, Share, Improve (LSI) actions and ensuring lessons arising from errors or improvement events translate into measurable improvements and reduced recurrence.
  • Consolidating sustainability data from multiple functions, validating its accuracy and completeness, and preparing sustainability disclosures in line with applicable reporting frameworks and regulatory requirements.
  • Managing multiple concurrent reporting cycles, reviews and ad hoc requests while meeting tight deadlines and maintaining the quality, consistency and traceability of information.
  • Building effective working relationships across diverse functions and levels of the organization to promote risk ownership, control awareness, sustainability accountability and timely action.

 

4.       Knowledge, Skills & Abilities, Experience Required

 

 

Must-have Leadership Competencies

 

  • Analytical Thinking
  • Collaboration and Stakeholder Management
  • Accountability & Ownership
  • Ownership & Continuous Improvement

Must-Have Technical / Functional Skills

 

  • Excel-based analysis, data validation and reporting
  • Risk/control registers and action tracking
  • Sustainability & ESG Reporting
  • Microsoft Excel (Advanced)
  • Microsoft PowerPoint (Advanced)
  • Microsoft Power BI (Intermediate to Advanced)

Key Knowledge Areas

 

  • Enterprise Risk Management (ERM) and risk mitigation.
  • Corporate governance, Board reporting and internal controls.
  • Sustainability and ESG reporting frameworks, including IFRS S1/S2, GRI, SASB and SECP requirements.
  • Experience should include relevant exposure to risk assessments, management reporting, control reviews or sustainability reporting, with demonstrated ability to analyse information, coordinate cross-functional inputs and deliver accurate outputs within deadlines.
  • Experience in applying ESG reporting frameworks, climate-risk assessment, Scope 3 emissions analysis or Power BI reporting is preferable.

 

5.       Experience & Education (& Technical Qualifications if applicable)

 

 

Professional Experience

 

Minimum 5 years of relevant professional experience in enterprise risk management, governance, internal controls, sustainability reporting, or a related field.

Experience in preparing management presentations and reports, with proficiency in Microsoft Excel, Power BI and PowerPoint.

Experience in sustainability reporting, ESG data collection, validation and coordination with cross-functional data owners.

 

Education & Technical Qualifications*

 

Must-have:

  • Bachelor’s degree in Accounting & Finance, Business Administration, or a related discipline.
  • Advanced proficiency in Microsoft Excel and PowerPoint.
  • Working proficiency in Microsoft Power BI and data visualization.
  • Strong written and verbal communication skills.

Preferred:

  • Professional certification or qualification in risk management, governance, internal audit, compliance or sustainability.
  • Familiarity with sustainability reporting frameworks, including IFRS S1/S2, GRI, SASB and applicable SECP requirements.
  • Training or certification in enterprise risk management, business continuity management or ESG reporting.
  • CA or ACCA qualified
  • Master’s degree in finance, Risk Management, Business Administration, Sustainability or a related field.

* Also mention any license, registration, or certification specifically required to achieve the outputs expected from this job

 

Character-based leadership is the cornerstone of our value-driven culture at Engro. We aim to create meaningful impact through desired behavior, exceptional service, and a high sense of responsibility

 

Apply now »