Companies in this catalog do not charge applicants. Never send money to apply.
About the role
We are looking for an experienced Enterprise Risk Management Expert to establish and run a robust ERM capability across the organisation. You will design the framework, embed it across business units, and give senior leadership and the Board clear, decision-ready insight into the organisation's key risks.
Key responsibilities
Design, establish and operationalise the ERM framework, policy, methodology and governance structure, in line with ISO 31000 and COSO ERM
Develop and maintain the corporate risk register, ensuring risks are clearly defined, owned, assessed and regularly reviewed
Define the organisation's risk appetite and tolerance framework, and translate it into practical thresholds for decision-making
Lead enterprise-wide risk assessments, workshops and prioritisation exercises with business and functional leaders
Work with risk owners to develop risk mitigation plans and controls, and track their implementation
Design and monitor Key Risk Indicators (KRIs), with escalation triggers and thresholds
Build risk dashboards and produce clear executive and Board-level risk reporting
Set up and support risk governance forums and committees, including terms of reference, agendas and follow-up of actions
Embed a risk-aware culture through training, awareness sessions and guidance for risk owners and champions
Integrate ERM with strategic planning, internal audit, compliance, business continuity and project governance
Keep up with emerging risks and regulatory developments, and advise leadership on their impact
Requirements
Bachelor's degree in risk management, Business, Finance, Engineering or a related field; Master's or MBA preferred
10+ years of risk management experience, with significant hands-on experience setting up and running ERM frameworks
Proven track record building corporate risk registers, risk appetite statements and KRI frameworks from the ground up
Strong knowledge of ISO 31000, COSO ERM and related governance and control frameworks
Experience producing executive and Board-level risk reporting and dashboards
Excellent facilitation, stakeholder management and influencing skills at senior level
Strong analytical, problem-solving and report-writing skills
Experience in government, semi-government or regulated sectors in the GCC is highly desirable
Preferred certifications
ISO 31000 Lead Risk Manager, IRM certification, RIMS-CRMP, CRMA or similar
