MUHAMMAD MIKHAIL GERINSA
Risk Management and Compliance
Antara Gapi Serendah
Summary
Accomplished Risk and Compliance Manager with 18 years of extensive experience in risk management and compliance across diverse industries. Expertise in designing and executing comprehensive Enterprise Risk Management (ERM) strategies to identify, assess, and mitigate risks at all organizational levels. Skilled in developing and implementing robust policies and procedures aimed at risk prevention, containment, and control. Proficient in navigating complex regulatory frameworks to ensure compliance and uphold the highest standards of corporate governance. Demonstrated success in managing risk and compliance programs for renowned organizations such as CIMB Bank, Proton, Columbia Asia Healthcare, Johawaki Holdings Sdn Bhd, Felda Investment Corporation, Wasco Energy Group, and YAPEIM.
Overview
20
20
years of professional experience
15
15
years of post-secondary education
2
2
Languages
Work History
Head of Risk Management & Compliance (Senior Manager)
Yayasan Pembangunan Ekonomi Islam Malaysia (YaPEIM)
01.2022 - Current
- Enterprise Risk Management (ERM): Developed and executed a comprehensive ERM framework that integrated risk identification, assessment, and mitigation processes across YAPEIM, enhancing risk visibility and management.
- Risk Appetite Management: Defined and articulated the YAPEIM’s risk appetite in alignment with strategic objectives, establishing risk tolerance levels and monitoring compliance with risk appetite thresholds.
- Leadership and Strategy: Lead a team of 10 risk and compliance professionals, guiding the implementation of risk management initiatives and ensuring alignment with corporate strategy.
- Regulatory Compliance: Managed compliance with industry regulations and ensured successful audits with no major findings.
- Policies and SOP Compliance: Collaborate with stakeholders to draft, update and maintain policies and SOPs that align with legal, regulatory and organizational standards. Ensure that all policies and SOPs are communicated effectively and accessible to relevant personnel.
Principle Consultant / Founder
QMH Risk Consulting Services
01.2021 - 12.2021
- Risk Management and Internal Control: Advises clients on optimizing internal controls and fortifying their overall risk management framework to ensure operational resilience and compliance.
- Anti -Bribery Management: Guides clients in the development of a robust Anti-Corruption and Bribery framework, aligned with MACC regulations (Section 17A), to mitigate legal and reputational risks.
- Enterprise Risk Management Framework: Assists clients in designing and implementing an Enterprise Risk Management (ERM) framework, encompassing the ERM Policy, ERM Manual, and Risk Register, based on ISO 31000 standards, to foster a proactive risk management culture.
Manager, Risk Management
Wasco Berhad
04.2018 - 12.2020
- Enterprise Risk Management (ERM) : Designed and executed ERM initiatives in alignment with ISO 31000 standards, strengthening risk oversight.
- Risk Assessment : Conducted thorough risk assessments, including risk identification, analysis, and estimation, to enhance risk management practices for the entire Group.
- Anti-Bribery program: Developed and implemented an Anti-Corruption and Bribery framework compliant with MACC regulations (Section 17A), reinforcing ethical standards.
- Anti-Bribery Management System : Collaborated with consultants to secure ISO 37001 certification for Anti-Bribery Risk Management, demonstrating commitment to best practices.
- Anti-Bribery Risk Register : Created and maintained a Bribery Risk Register and conducted Bribery Risk Assessments across departments and subsidiaries to identify and address potential risks.
Head of Risk Management Department (Risk Manager)
Felda Investment Corporation Sdn Bhd
06.2017 - 04.2018
- Enterprise Risk Management (ERM) Framework: Conducted a thorough review and revision of the existing ERM framework, Risk Management Policies, and Risk Assessment Guidelines for Felda Investment Corporation (FIC) Group, ensuring alignment with industry best practices and ISO 31000 standards.
- Risk Management Process: Planned, designed, and implemented a comprehensive Risk Management process for FIC and its subsidiaries, incorporating ISO 31000 Methodology to enhance risk identification, assessment, and mitigation strategies.
- Risk Appetite Establishment: Defined and quantified FIC and its subsidiaries' risk appetite, determining the acceptable level of risk and aligning it with organizational goals and risk tolerance.
- Reporting and Escalation: Reported high and significant risks to the Risk Management Committee, facilitating timely escalation to the Board Risk Management Committee (BRMC) when necessary.
- Investment Proposal Risk Analysis: Conducted comprehensive risk assessments on joint ventures and investment proposals, providing detailed analysis to support informed decisions by the Board of Directors (BOD)
Head of Risk & Compliance Unit (Risk Manager)
Johawaki Holdings Sdn Bhd
06.2014 - 06.2017
- ERM Framework: Developed and established the Enterprise Risk Management (ERM) framework, Risk Management Policies, and Risk Assessment Guidelines for Johawaki Group of Companies. Ensured implementation across all levels of the group in accordance with ISO 31000 methodology, enhancing organizational risk management practices.
- Risk Oversight: Managed and supervised the Enterprise Risk, Operational Risk, and Project Risk across Johawaki Group of Companies. Ensured robust risk management practices were maintained across all business units.
- Business Proposals: Conducted risk assessments for new business proposals, including joint ventures, mergers, and acquisitions, providing critical insights to support strategic decision-making.
- Compliance Program: Developed, initiated, maintained, and revised policies and procedures for the Compliance Program to prevent illegal, unethical, or improper conduct. Managed day-to-day operations of the Program to ensure effective compliance management.
Assistant Manager, Risk Management
Columbia Asia Healthcare Sdn Bhd
08.2013 - 06.2014
- Annual Country Risk Profile: Lead the annual update and preparation of the Group’s Country Risk Profile, incorporating the latest risk registers from hospitals, management offices, and the corporate office. The profile highlighted significant risks and the associated mitigation measures, providing a comprehensive overview for senior management.
- Training and Awareness: Organized and conducted risk management training workshops for Risk Management Coordinators and staff at new hospitals. Promoted risk management awareness and embedded a risk-conscious culture within the Group.
- Insurance Monitoring and Risk Assessment: Monitored group insurance policies and conducted risk assessment analyses during insurance renewals to ensure adequate coverage and identify any emerging insurance needs.
- Regional Risk Register: Assisted management offices in India, Malaysia, Indonesia, and Vietnam in reviewing their risk registers prior to presentation to the Audit Committee, ensuring consistency and thoroughness in risk documentation.
Senior Executive, Risk Management
Proton Holdings Berhad
01.2012 - 08.2013
- Enterprise Risk Management System: Spearheaded the development and implementation of the Enterprise Risk Management System (EMS Columbus) and Q-Radar, enhancing the organization's ability to identify, assess, and manage risks effectively.
- Risk Management Training: Facilitated comprehensive Risk Management training sessions across all business units, including Risk Awareness and High Impact Risk courses, to build organizational capacity and enhance risk management skills.
- Departmental Risk Registration: Supported PROTON business units in registering and documenting their departmental risks, including Group After Sales, Marketing, and Parts Centre, ensuring a thorough and organized approach to risk management.
- Group Risk Management Committee (GRMC) Support: Assisted the Head of the Group Risk Management Committee by preparing key papers and presentation materials, including comprehensive risk analysis and process improvement updates.
Executive Officer, Risk & Compliance
CIMB Bank
11.2006 - 12.2011
- Branch and Bureau De Change (BDC) Operations Management: Oversee daily operations across all CIMB branches and BDCs throughout Malaysia, including additional business units such as Call Centers, Cash Centers, Credit Card Centers, Group Administration, and Overseas Branches.
- Audit and Risk Monitoring: Conducted regular audit follow-ups and Risk Monitoring Review (RMR) visits according to scheduled plans. Assessed compliance with policies and procedures and implemented improvements as needed.
- Operational Risk Management: Reviewed and analyzed Operational Risk (OPRT) papers, proposing new suggestions and identifying emerging risks to enhance risk management practices.
- Compliance Reporting: Prepared detailed compliance reports based on findings from visits and communicated with branch and business unit top management. Ensured that issues were addressed and resolved to prevent recurrence.
Executive Sales Representative
HSBC Bank
11.2004 - 10.2006
- Sales and Marketing : Delivered direct marketing and sales support to the field and distribution sales teams, ensuring alignment with business objectives.
- Marketing Promotions: Maintained comprehensive databases for customers, prospects, and competitors, while assessing, planning, and executing targeted marketing promotions.
- Telesales : Drove new business growth through outbound calls and consistent follow-ups on incoming sales leads.
- Sales and Customer Service Inquiry : Handled all sales inquiries, including telephone and mail, ensuring prompt and efficient customer service.
Education
MBA - Strategic Management
International Islamic University of Malaysia
Kuala Lumpur, Malaysia 05.2014 - 09.2017
BBA - Finance
Universiti Tenaga Nasional
Kajang, Selangor, Malaysia 05.1999 - 11.2004
Sijil Pelajaran Malaysia (SPM) - Social Science
Sekolah Menengah Sains Miri
01.1991 - 12.1996
Skills
Risk modeling
Accomplishments
- Enterprise Risk Management framework and Policies development, 06/01/14 - 12/01/14
- Risk Management System Development, 05/01/15 - 04/01/16
- Anti-Bribery Management System Certification, 01/01/2020
Conferences Courses
- Train the trainer, 03/01/15 - 03/01/15, IRS Training Sdn Bhd
- Prevention Corruption on Infrastructure Project Workshop, 10/01/15 - 10/01/15, CIDB
- Construction Project Risk Management, 10/01/15 - 10/01/15, LV Management
- High Impact Risk Management Training, 01/01/12 - 01/01/12, KPMG
- Basic Leadership Development Program, 11/01/14 - 11/01/14, Lighthouse Consulting
- Building High Performance Culture Through Team Power, 11/01/06 - 11/01/06, Dynamic Team Holdings Sdn Bhd
Personal Information
Notice Period: 3 Months
references
1. Name : Mohammad Ashraf Md Radzi
Designation :Chief Executive Officer
Company name : Lembaga Tabung Angkatan Tentera (LTAT)
Telephone number : 013-3933178
2. Name : Ariesza Noor
Designation :Chief Strategy Officer
Company name : Wasco Berhad
Telephone number : 019-3530896
Timeline
Head of Risk Management & Compliance (Senior Manager)
Yayasan Pembangunan Ekonomi Islam Malaysia (YaPEIM)
01.2022 - Current
Principle Consultant / Founder
QMH Risk Consulting Services
01.2021 - 12.2021
Manager, Risk Management
Wasco Berhad
04.2018 - 12.2020
Head of Risk Management Department (Risk Manager)
Felda Investment Corporation Sdn Bhd
06.2017 - 04.2018
Head of Risk & Compliance Unit (Risk Manager)
Johawaki Holdings Sdn Bhd
06.2014 - 06.2017
MBA - Strategic Management
International Islamic University of Malaysia
05.2014 - 09.2017
Assistant Manager, Risk Management
Columbia Asia Healthcare Sdn Bhd
08.2013 - 06.2014
Senior Executive, Risk Management
Proton Holdings Berhad
01.2012 - 08.2013
Executive Officer, Risk & Compliance
CIMB Bank
11.2006 - 12.2011
Executive Sales Representative
HSBC Bank
11.2004 - 10.2006
BBA - Finance
Universiti Tenaga Nasional
05.1999 - 11.2004
Sijil Pelajaran Malaysia (SPM) - Social Science
Sekolah Menengah Sains Miri
01.1991 - 12.1996
Similar Profiles
NIK NURRAIHAN NIK RAHIMNIK NURRAIHAN NIK RAHIM
Administrative Executive at Yayasan Pembangunan Ekonomi Islam MalaysiaAdministrative Executive at Yayasan Pembangunan Ekonomi Islam Malaysia
Muhammad HashimMuhammad Hashim
Internal Auditor (Head Of Audit Unit) at Yayasan Islam Negeri KedahInternal Auditor (Head Of Audit Unit) at Yayasan Islam Negeri Kedah
Afsah Mohd DaudAfsah Mohd Daud
Administration Clerk at Bank Pembangunan Malaysia BerhadAdministration Clerk at Bank Pembangunan Malaysia Berhad