Enterprise Risk Officer

Role Purpose

Framework and Governance

• Act as the internal counterpart to the external consulting partner during implementation, owning documentation, knowledge transfer, and handover.
• Maintain the group risk policy, taxonomy, scoring criteria, and risk appetite statements, including the annual refresh cycle.
• Administer the risk register across corporate, business unit, and major project levels.

Risk Assessment and Commercial Risk

• Facilitate risk workshops and interviews with business unit leadership, project directors, and functional heads across the UAE, KSA, and Qatar.
• Challenge optimistic likelihood and impact ratings, maintain KRIs, monitor tolerance breaches, and escalate defined triggers.
• Embed risk review into tender and bid gates covering contract, credit, damages, design, scope, supply chain, and price escalation risks.
• Support major projects with live risk registers and feed realized risk events and lessons learned back into tender assumptions.

Data and Monitoring

• Expand the KRI library using measurable indicators based on data already held by the group.
• Connect ERP, project controls, procurement, finance, HR, and HSE data into a single monitoring layer.
• Build live risk dashboards with automated threshold alerts and move reporting toward continuous, near real-time visibility.
• Use AI and automation to classify unstructured sources, detect anomalies, identify early warnings, and draft narrative risk commentary.
• Prototype and iterate directly as a hands-on builder rather than only writing requirements.

Continuity and Reporting

• Maintain and periodically test business continuity and crisis management plans.
• Produce quarterly risk reporting for the Executive Committee and Audit & Risk Committee while reducing manual production effort.
• Maintain live dashboards for executive and business unit audiences using Power BI or an equivalent platform.

Culture and Training

• Deliver risk awareness training and serve as the business’s first point of contact for risk matters.

Required Qualifications and Experience

• Bachelor’s degree in engineering, Finance, Business Administration, or a related discipline.
• 3–5 years of enterprise risk management experience, including at least two years in a dedicated ERM role.
• Demonstrable GCC experience in the UAE and/or KSA.
• Hands-on experience with risk registers, risk workshops, and board-level risk reporting.

Preferred Certifications

• Preferred certifications include ISO 31000 practitioner or lead risk manager, IRM Certificate or Diploma, PMI-RMP, and CRMA.
• Candidates working toward one of the listed certifications will be considered; certification does not replace operating experience.

Technical and Interpersonal Skills

• Advanced Excel, Power Query, and Power BI or equivalent BI platform capability are required.
• Practical AI and automation fluency is required; SQL or Python literacy is advantageous but not a hard requirement.
• Working knowledge of APIs, integrations, GRC or risk management software, facilitation, stakeholder management, and concise written English is expected.
• Arabic is advantageous given KSA operations, and the role operates as a single-person function with senior sponsorship.

First 12-Month Success Measures