Risk Manager

Risk Governance & Framework

· Develop, implement, and maintain a comprehensive Risk Management Framework (RMF) consistent with CBUAE Risk Management Standards and ISO 31000 principles, and internal governance requirements.

· Ensure independence of the Risk function as the second line of defense, separate from operational management and internal audit.

· Support the Board and Board Risk and Compliance Committee (BRCC) in overseeing risk strategy and risk appetite.

· Collaborate with Head of Compliance and Assurance to ensure alignment on regulatory and internal risk policies.

Risk Identification & Assessment

· Identify, assess, and mitigate strategic, financial, operational, credit, and technology risks.

· Conduct periodic enterprise-wide risk assessments and scenario analyses to determine risk exposures and emerging threats.

· Evaluate the effectiveness of internal controls and risk mitigation measures.

· Contribute to defining risk appetite and risk tolerance levels appropriate to business strategy and operational scale.

Risk Monitoring & Reporting

· Maintain risk registers, Key Risk Indicators (KRIs), and dashboards to monitor exposures across business lines.

· Escalate breaches of risk appetite in accordance with CBUAE governance standards.

· Prepare risk- related reports for the BRCC, and senior management, highlighting material risk exposures, trends, and breaches.

· Coordinate with Compliance for any regulatory risk related submissions, and governance reports required by the CBUAE and other relevant authorities.

· Support Management in licensing submissions related to Risk Management.

Maintain documentation demonstrating compliance with applicable risk management requirements under SVF and RPSCS Regulations.

Operational & Technology Risk Oversight

· Oversee risk controls over business continuity and third-party service providers.

· Conduct periodic reviews and stress tests to evaluate resilience against operational disruptions, or system failures.

· Ensure that Business Continuity and Disaster Recovery frameworks meet CBUAE Operational Resilience expectations.

· Work in coordination with the Information Security Manager to, maintain and implement the organization’s Business Continuity Plan and Management (BCP & BCM).

Risk Culture & Awareness

· Provide training for employees to become aware of risks and learn to mitigate them.

· Provide coaching, develop skills, deepen learning, and improve performance of employees and peers.

· Foster a risk-aware culture across the organization

Future Growth and Team Development

· The Risk manager will scale the Risk function, recruiting, mentoring, and management a risk team, as business requirements.