Manager-Internal Audit & Risk Management- Saudi Nationals

About the Employer

Role Overview

Internal Audit and Assurance

• Support development of the annual risk-based internal audit plan and independently execute assigned audit engagements.
• Evaluate business functions, processes, and controls and identify improvement opportunities.
• Assess compliance with laws, regulations, and company policies.
• Prepare reports for senior management and the Board Audit Committee.
• Monitor implementation of audit recommendations and review company policies and procedures.

Project and Contract Audits

• Audit the project lifecycle from origination and bidding through financial close, construction, commissioning, and handover.
• Review compliance with EPC, O&M, PPA/WPA, shareholder, and financing agreements.
• Verify progress payments, variation orders, claims, change management, and contingency use against approved budgets and contractual entitlement.
• Assess governance, delegation of authority, and controls at SPVs and joint ventures.

Risk Management

• Support annual planning and execution of risk management engagements.
• Develop, implement, and maintain the company's ERM framework covering risk identification, assessment, mitigation, and monitoring.
• Conduct risk assessments and develop mitigation plans aligned with the ERM strategy and internal controls framework.
• Maintain the risk register, communicate risks to stakeholders, integrate risk management with audit, and analyze emerging risks.
• Execute assigned advisory and ad hoc engagements within expected turnaround time and quality standards.

Qualifications

• Bachelor's degree in Accounting, Finance, Business Administration, Engineering, or a related discipline.
• 8–10 years of relevant professional experience, including at least 4–5 years in internal audit, risk management, or external audit.
• CIA certification is required, or the candidate must be actively pursuing it for completion within an agreed timeframe.
• A master's degree or MBA is preferred.
• Experience with Big Four or leading professional services firms is preferred.
• Exposure to IPP/IWP structures, SPVs, joint ventures, EPC and O&M contracts, and project finance is strongly preferred.
• Experience reporting to or presenting at an Audit Committee or equivalent governance forum.

Additional Credentials and Knowledge

• SOCPA, CPA, ACCA, CRMA, CFE, CISA, or PMP certification is preferred.
• ISO 31000 risk management training is an advantage.
• Knowledge of COSO internal control and enterprise risk management frameworks is required.
• Understanding of NCA Essential Cybersecurity Controls, Saudi Companies Law, corporate governance regulations, ZATCA requirements, and IFRS as endorsed in Saudi Arabia is required.