enterprise risk manager

Accounting Bookeepers

<p>Zahid Jamil &amp; Co. is looking for a highly skilled and analytical <b>Manager Risk</b> to join its professional team in Karachi. The ideal candidate will be responsible for supporting enterprise risk management activities, strengthening internal controls, and assisting in the development of risk mitigation strategies across the organization.</p><p><b>Requirements:</b></p><ul><li>Qualification: <b>FRC / MA or equivalent </b></li><li>Experience: <b>4&ndash;5 years of relevant experience in risk management, internal controls, compliance, or audit</b></li><li>Strong understanding of enterprise risk management (ERM) frameworks and methodologies</li><li>Ability to analyze operational, financial, and compliance risks effectively</li><li>Strong reporting, communication, and stakeholder management skills</li></ul><p><b>Key Responsibilities:</b></p><ul><li>Develop, implement, and maintain enterprise risk management frameworks and policies</li><li>Identify, assess, and monitor key organizational risks</li><li>Prepare periodic risk assessment reports and dashboards for management</li><li>Coordinate with internal departments to ensure effective risk mitigation measures</li><li>Support compliance reviews and internal control improvements</li><li>Assist in risk-based assessments and advisory initiatives</li></ul><p>Pay: From Rs150,000.00 per month</p><p>Work Location: In person</p>

Manager Risk

True Anomaly

<div><div><p>Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.</p>
<p>
OUR MISSION</p>
<p>
True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors &mdash; enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.</p>
<p>
OUR VALUES</p>
<ul>
<li><b>Be the offset.</b> We create asymmetric advantages with creativity and ingenuity.</li>
<li><b>What would it take?</b> We challenge assumptions to deliver ambitious results.</li>
<li><b>It&rsquo;s the people.</b> Our team is our competitive advantage and we are better together.</li>
</ul></div><div><p><b>
Your Mission</b></p>
<p>
We are seeking a driven and detail-oriented Enterprise Risk Analyst to support two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor Risk Management (TPVRM). Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role in executing risk assessments, maintaining program documentation, tracking remediation activities, and building the data foundation that powers executive-level risk decision-making.</p>
<p>
This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense SaaS environment. You will work closely with engineering, security, legal, compliance, and operations teams to help identify, document, and track risk across the enterprise and its third-party supply chain.</p><br>
<p></p>
<p><b>
Responsibilities:</b></p><br>
<p></p>
<p><b>
Enterprise Risk Management</b></p>
<ul>
<li>Support the design, execution, and continuous improvement of the enterprise risk management program under the direction of the Senior Enterprise Risk Manager.</li>
</ul><ul><li>Assist in conducting structured risk assessments using OCTAVE or similar threat-and-asset-centric methodologies, documenting findings, threat profiles, and recommended mitigations.</li>
</ul><ul><li>Support the application of FAIR methodology to help quantify risks in financial terms and contribute to risk prioritization analyses for leadership.</li>
</ul><ul><li>Maintain and update the enterprise risk register, ensuring accuracy of risk ratings, ownership assignments, remediation status, and residual risk tracking.</li>
</ul><ul><li>Build and maintain program dashboards, KPI/KRI reports, and status tracking using tools such as Jira, Confluence, enterprise GRC platforms, and MS Project.</li>
</ul><ul><li>Assist with audit readiness activities including evidence collection, pre-assessment preparation, control documentation, and post-audit remediation tracking.</li>
</ul><ul><li>Support POA&amp;M management for IL5 and IL6 environments, tracking open items to closure and escalating blockers to the Enterprise Risk Manager.</li>
</ul><ul><li>Contribute to the development and maintenance of risk policies, standards, and guidelines aligned to NIST SP 800-53 Rev. 5, NIST SP 800-171, RMF, and CMMC Level 3.</li>
</ul><ul><li>Coordinate and track internal audit schedules, findings, and corrective action plans across business units.</li>
</ul>
<p><b>Third-Party Vendor Risk Management</b></p>
<ul>
<li>Execute vendor risk assessments as part of the onboarding and periodic review lifecycle, including security questionnaire administration, documentation review, and risk scoring.</li>
</ul><ul><li>Maintain the vendor risk inventory and lifecycle tracking records, ensuring all vendors are appropriately tiered and assessed on schedule.</li>
</ul><ul><li>Monitor vendor risk signals including cybersecurity advisories, regulatory actions, and contractual compliance status, escalating material changes to the Enterprise Risk Manager.</li>
</ul><ul><li>Support contract and procurement teams by providing vendor risk assessment findings and recommended risk mitigation language.</li>
</ul><ul><li>Assist in ensuring TPVRM program alignment with CMMC supply chain requirements, DFARS clauses, and ITAR/export control considerations for critical suppliers.</li>
</ul><ul><li>Develop and maintain vendor risk reporting inputs and dashboard content to support executive-level visibility into third-party risk exposure.</li>
</ul>
<p><b>Cross-Functional Collaboration</b></p>
<ul>
<li>Serve as a reliable day-to-day point of contact for risk-related inquiries from internal stakeholders across engineering, security, operations, and legal teams.</li>
</ul><ul><li>Track program milestones, action items, and deliverables, proactively communicating status and flagging risks or dependencies to the Enterprise Risk Manager.</li>
</ul><ul><li>Continuously improve risk program workflows, documentation templates, and reporting processes to support scalable and repeatable execution.</li>
</ul><ul><li>Support the preparation of materials for internal leadership briefings, external assessor interactions, and government partner reviews.</li></ul><br>
<p></p>
<p><b>
Qualifications</b></p>
<ul>
<li><b>5+ years</b> of experience in enterprise risk management, GRC, cybersecurity risk, compliance, or a closely related discipline.</li>
</ul><ul><li>Working knowledge of NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more of these frameworks.</li>
</ul><ul><li>Familiarity with risk assessment methodologies including FAIR and/or OCTAVE, with a desire to deepen applied expertise in risk quantification.</li>
</ul><ul><li>Experience supporting or executing third-party/vendor risk assessments, including questionnaire administration, documentation review, and risk tracking.</li>
</ul><ul><li>Hands-on experience with program management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC platforms, and MS Visio or Lucidchart.</li>
</ul><ul><li>Strong written and verbal communication skills, with the ability to clearly document findings and translate risk concepts for both technical and non-technical audiences.</li>
</ul><ul><li>Highly organized, self-directed, and comfortable managing multiple workstreams simultaneously in a fast-paced, regulated environment.</li>
</ul><ul><li>Active or ability to obtain <b>SECRET</b>, <b>TS/SCI security clearance</b>.</li>
</ul><ul><li>Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)).</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications</b></p>
<ul>
<li>Background in startup, aerospace, defense technology, or SaaS companies operating in regulated government markets.</li>
</ul><ul><li>Industry certifications such as:</li>
</ul><ul><li>Certified in Risk and Information Systems Control (CRISC)</li>
</ul><ul><li>Certified Information Systems Auditor (CISA)</li>
</ul><ul><li>Open FAIR Certification (The Open Group)</li>
</ul><ul><li>CompTIA Security+ or equivalent</li>
</ul><ul><li>Certified ScrumMaster (CSM) or similar Agile certification</li>
</ul><ul><li>Experience with cloud environments, particularly Azure Government and/or AWS GovCloud.</li>
</ul><ul><li>Familiarity with POA&amp;M management, SSP documentation, and audit evidence collection in DoD authorization contexts.</li>
</ul><ul><li>Working knowledge of ITAR, EAR, DFARS, and export control considerations as they relate to vendor and supply chain risk.</li>
</ul><ul><li>Familiarity with Agile/Scrum and hybrid project delivery models.</li></ul><br>
<p></p>
<p><b>
Compensation</b></p>
<ul>
<li><b>Base Salary:</b> Denver - $115,000 to $155,000, Long Beach - $120,000 to $165,000, Washington, DC - $120,000 to $165,000</li>
</ul><ul><li><b>Equity + Benefits</b> including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave</li>
</ul>
<p><i>Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.</i></p><br>
<p></p>
<p><b>
Additional Requirements</b></p>
<ul>
<li><b>Work Location:</b> This role will be onsite at one of our office locations: Centennial, CO, Long Beach, CA, or Washington, DC <b>#LI-Onsite</b></li>
</ul><ul><li><b>Work Environment:</b> Standard office setting, working at a desk or in a production factory environment</li>
</ul><ul><li><b>Physical Demands:</b> May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs.</li></ul><br>
<p></p>
<p><i>
This position will be open until it is successfully filled.</i></p>
<p>
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.</p>
<p>
We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.</p></div><p></p><div><p><br>
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.</p>
<p>
True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.</p></div></div><p></p>

Enterprise Risk Analyst

Propel Consult

<p>Job Title: Credit &amp; Risk Manager<br/>Department: Risk Management Department<br/>Location: Head Office - Kingdom of Bahrain<br/>Reporting to: Chief Executive Officer (CEO)</p><p>Job Purpose</p><p>To lead and manage the company&rsquo;s enterprise risk and credit risk framework, ensuring prudent lending practices, portfolio quality, regulatory compliance, and alignment with the requirements of CBB.<br/>The role is responsible for safeguarding asset quality, optimizing risk-adjusted returns, and maintaining a strong risk culture across the company.</p><p>Responsibilities</p><ul><li>Risk Management Framework</li></ul><p>&middot; Develop, implement, and maintain enterprise-wide risk management policies and frameworks.</p><p>&middot; Identify, assess, monitor, and mitigate key risks including credit, liquidity, operational, compliance, and reputational risks.</p><p>&middot; Maintain risk appetite statements and risk tolerance limits approved by the Board.</p><p>&middot; Prepare periodic risk reports to Management and Board Committees.</p><ul><li>Credit Risk Management</li></ul><p>&middot; Oversee underwriting standards, credit approval processes, and lending controls.</p><p>&middot; Review and approve credit proposals within delegated authority.</p><p>&middot; Ensure sound borrower assessment, affordability checks, collateral coverage, and covenant monitoring.</p><p>&middot; Monitor concentration risk, sector exposure, and large obligor limits.</p><ul><li>Portfolio Monitoring &amp; Collections Oversight</li></ul><p>&middot; Track portfolio performance including arrears, delinquency, NPLs, restructuring, and recoveries.</p><p>&middot; Recommend corrective actions to improve collections and reduce defaults.</p><p>&middot; Conduct stress testing and scenario analysis on loan portfolio.</p><ul><li>Regulatory Compliance &amp; Governance</li></ul><p>&middot; Ensure compliance with CBB rules, prudential requirements, and governance standards.</p><p>&middot; Coordinate risk-related regulatory returns, ICAAP/Capital assessments, and audit responses.</p><p>&middot; Liaise with Internal Audit, Compliance, and External Auditors.</p><ul><li>Strategic Support</li></ul><p>&middot; Provide independent risk opinions on new products, partnerships, and strategic initiatives.</p><p>&middot; Support growth while maintaining acceptable risk-adjusted profitability.</p><p>Requirements<br/>&middot; Bachelor&rsquo;s degree in Finance, Banking, Accounting, Risk Management, or related field.</p><p>&middot; Master&rsquo;s degree / MBA preferred.</p><p>&middot; Professional certifications desirable: FRM, PRM, CFA, ACCA, CPA.</p><p>&middot; Minimum 7-10 years&rsquo; experience in risk management / credit risk within banks or financing companies.</p><p>&middot; Strong knowledge of CBB regulations, especially Volume 5.</p><p>&middot; Experience in SME, corporate, consumer, and secured lending preferred.</p><p>Work Location: In person</p>

Credit and Risk Manager

Red Sea Global

<div><div><div><div><div>Division: Governance, Risk and Compliance
</div></div></div></div><div><div><div><div>Department: Risk
</div></div></div></div><div><div><div><div>Company: Red Sea Global
</div></div></div></div><div><div><div><div><p><b>Be the change. Join the world&rsquo;s most visionary developer.</b></p><br>
<p></p>
<p>
Red Sea Global (RSG) is showing that there is a better way to positively shape the places we live, work and travel.</p><br>
<p></p>
<p>
We are purpose-driven and committed to people and planet. Our transformative programs are a driving force to achieving Vision 2030, as well as leading the world towards regenerative tourism.</p><br>
<p></p>
<p><b>
Join RSG and be part of the positive change for Saudi Arabia and the world.</b></p><br>
<p></p>
<p><b>
Job Purpose:</b></p>
<ul>
<li>Responsible for overseeing and managing risks on an enterprise and corporate level. In addition, support the Enterprise Risk Team in various risk management tasks, including but not limited to conducting risk analysis, and develop scenarios to ensure the organization is prepared for potential risks.</li>
<li>Additionally, the role involves providing input and support within resilience such as Business Continuity Management (BCM) and other GRC areas.</li></ul><p><br>
</p><p></p><p><b>Job Responsibilities</b></p><br>
<p></p>
<p><b>
Administrative Responsibilities:</b></p>
<div>
<ul><li>Assist in developing and update risk management policies and procedures.</li></ul>
<ul><li>Manage day-to-day activities &amp; operations, including implementation of all policies &amp; procedures and recommend potential improvements where appropriate.</li></ul>
<ul><li>Prepare regular risk reports for senior management and assist in preparing Audit Committee and Board of Directors risk reports and any other related asks (resolutions) as needed.</li></ul>
<ul><li>Maintain effective communication channels with stakeholders to ensure a comprehensive understanding of risk management activities.</li></ul>
<ul><li>Assist in developing and conducting risk training and awareness programs for champions, employees and other stakeholders as needed.</li></ul></div><br>
<p></p>
<p><b>
Functional Responsibilities:</b></p><br>
<p></p>
<div>
<ul><li>ERM Framework</li></ul>
</div><ul><li>Identify risks and ensure all material risks are properly consolidated at the Enterprise level and escalated to the Associate Corporate Risk Director.</li>
<li>Run and facilitate risk assessment workshops and the development of risk treatment plans with the risk owners and champions.</li>
<li>Monitor and report on the effectiveness of risk management initiatives.</li>
<li>Consolidate risks at the Enterprise (Group and subsidiaries) level and escalate to the Associate Corporate Risk Director as needed.</li>
<li>Engage Operation, Projects Delivery, and Development risk teams to ensure proper and effective transfer of risks across the value chain and risk owners.</li>
<li>Engage the teams in discussions regarding events that could lead to potential losses or missed opportunities.</li>
<li>Engage with Senior Management and provide risk report and update.</li></ul><br>
<p></p>
<div>
<ul><li>Monitoring and Reporting:</li></ul>
</div><ul><li>Prepare dashboards, monitor compliance and effectiveness of the RM processes &amp; procedures within RSG, and report on results.</li>
<li>Monitor implementation timeliness and effectiveness of the consolidated risk treatment plans and strategy;</li></ul><br>
<p></p>
<div>
<ul><li>Risk Analysis and Scenarios:</li></ul>
</div><ul><li>Conduct thorough risk assessments and analysis to identify potential risks and their impacts.</li>
<li>Develop risk scenarios and conduct simulations to prepare for potential risk events.</li>
<li>Provide detailed reports and recommendations based on risk analysis.</li></ul><br>
<p></p>
<div>
<ul><li>Support Enterprise Risk Management:</li></ul>
</div><ul><li>Assist in the development and implementation of the Enterprise Risk Management (ERM) framework.</li>
<li>Collaborate with various departments to ensure risk management practices are integrated into business processes.</li>
<li>Support the Corporate Risk Associate Director in identifying and managing enterprise-level risks.</li></ul><br>
<p></p>
<div>
<ul><li>Business Continuity Management (BCM):</li></ul>
</div><ul><li>Support in Business Continuity Management and develop BCM plans to ensure the organization&rsquo;s readiness to respond to and recover from disruptions.</li>
<li>Support in conducting regular BCM exercises and update plans as necessary.</li></ul><br>
<p></p>
<div>
<ul><li>Training and Communication:</li></ul>
</div><ul><li>Identify risk training needs.</li>
<li>Develop and deliver training for the Risk Champions to raise Risk Management awareness.</li>
<li>Recommend awareness messages (i.e., emails, brochures, screen savers, etc.) to be delivered to the business; and</li>
<li>Share risk practices knowledge and best practices with the team function.</li></ul><br>
<p></p>
<p><b>
Job Requirements</b></p><br>
<p></p>
<p><b>
Qualification and Experience:
</b></p><ul><li>Bachelor&rsquo;s degree in risk management, Business Administration, or a related field. Master&rsquo;s degree preferred.</li>
<li>Certification in Risk Management from a well-renowned international body (i.e., IIA, IRM, OCEG)</li>
<li>Professional certifications such as Certified Risk Management Professional (CRMP) are highly desirable.</li>
<li>Entry level or a minimum of 5 years of experience in risk management or assurance (Internal Audit).</li></ul><br>
<p></p>
<p><b>
Skills:</b></p>
<ul>
<li>Written and verbal English language skills</li></ul></div></div></div></div></div><p></p>

Manager - Corporate Risk

OQ Chemicals

<div><div><div><div><div><div><b>Job title</b></div></div><div><br>
<div>
Expert of Business Continuity</div></div><div><br>
<div><b>
Grade</b></div></div></div><div></div><div><br>
<div>
<div><b>Stream</b></div></div><div><br>
<div>
Finance &amp; Procurement</div></div><div><br>
<div><b>
Function</b></div></div><div><br>
<div>
Finance - Enterprise Risk Management and Business Continuity</div></div></div><div><br>
<div>
<div><b>Location</b></div></div><div><br>
<div>
Oman &ndash; Muscat<br>
</div></div><div><div><b>Budget control</b></div></div><div><br>
<div>
*OPEX and/or CAPEX and/or Revenue amount as relevant*</div></div></div><div><br>
<div>
<div><b>Reporting to</b></div></div><div><br>
<div>
Head of Enterprise Risk Management and Business Continuity<br>
</div></div><div><div><b>Direct Reports<br>
</b></div></div><div><ul><li></li></ul></div></div><div><br>
<div>
<div><b>Job purpose
</b></div><div>Proactive Business Continuity Expert with solid working knowledge of Business Continuity Management, Crisis Management, Disaster Management, and IT Disaster Recovery. The role will manage end-to-end operational disruption scenarios, including cyber incidents, process interruptions, facility outages, and supply chain disruptions, ensuring readiness, response coordination, and continual improvement of OQEP&rsquo;s resilience capabilities. The role provides independent oversight and assurance enablement by establishing robust governance, assurance, and internal control environment, while supporting compliant execution and organizational resilience in alignment with internal policies, international standards, and government and regulatory requirements.</div><br>
<div></div>
<div>
The position will act in accordance with the OQEP&rsquo;s Mission, Vision, Values &amp; Strategies, as well as, policies, guidelines, and international standards, supported by an IT Technology platform, QHSE &amp; Energy Management System requirements standards, Omani&rsquo;s government &amp; other legal justifications, and best international practices in consonance with national objectives.</div></div></div><div><br>
<div>
<div><b>Main tasks and responsibilities</b><b><br>
</b></div><div></div><ul><li>Develop and maintain BCM, incident response, and crisis management strategies, frameworks, plans, policies, procedures, and programs in line with the defined strategy and stakeholder requirements.</li>
<li>Perform business impact analyses (BIA) identify critical processes, dependencies, and recovery requirements</li>
<li>Ensure business continuity and recovery plans are developed, maintained, and tested</li>
<li>Plan, facilitate, and evaluate exercises (tabletop, simulation, call-tree, and recovery tests) to enhance preparedness; document lessons learned and track closure of actions.</li>
<li>Support crisis preparedness and organizational resilience initiatives in coordination with relevant stakeholders</li>
<li>Act as the enterprise owner of business continuity governance, ensuring alignment between BC plans, crisis management protocols, and enterprise risk assessments</li>
<li>Monitor evolving practices in business continuity, disaster recovery, and crisis management; share knowledge and recommend enhancements to improve maturity.</li>
<li>Support crisis and BCM specialists on operational and strategic activities, including readiness assessments, program reporting, and stakeholder engagement.</li>
<li>Support solution development and business development in BCM/DR/crisis management, including preparing proposals and identifying opportunities.</li>
<li>Support the team in managing enterprise risk management
 </li><li>Develop, maintain, and update policies, standards, and procedures related to risk management, internal controls, governance &amp; compliance, and business continuity</li>
<li>Ensure alignment with applicable government, regulatory, and partner requirements</li>
<li>Monitor regulatory developments affecting risk, control, and continuity obligations and assess organizational impact</li>
<li>Coordinate regulatory-driven risk and control assessments with Finance and other corporate functions to ensure consistent interpretation and compliance</li>
<li>Own the internal control framework aligned with recognized standards (e.g. COSO)</li>
<li>Lead control risk assessments and prioritize remediation of control weaknesses</li>
<li>Maintain control documentation, including process narratives, risk-control matrices, and control libraries</li>
<li>Track remediation actions and report on control effectiveness and maturity</li>
<li>Coordinate with Internal Audit and External Audit to support assurance activities without duplicating assurance ownership</li>
<li>Own enterprise-level control deficiency tracking and remediation reporting, including coordination with Financial Control and process owners</li>
<li>Perform other related duties as assigned.</li></ul></div><br>
</div><br>
<div><div><div><b>Key interactions</b></div>
<div><b>
Internal:</b> Head of ERM &amp; BC, VP Finance, Financial Control, Corporate Planning &amp; Performance, Business Finance (Operated &amp; Non-Operated Assets), Internal Audit, Legal, HSE, Operations and PT&amp;C</div>
<div><b>
External</b>: Regulators and government entities, External auditors and advisors (risk, control, and continuity matters)</div></div></div><div><br>
<div>
<div><b>Notable Working Conditions. </b>Office environment, intensive computer screen use, sporadic visits to operation site.</div></div></div><div><br>
<div>
<div><b>Education requirements</b></div></div><div><br>
<p>
Bachelor's degree in Business Administration, Finance, Risk Management, Engineering, or related field.</p></div></div><div><br>
<div>
<div><b>Language</b></div></div><div><br>
<div>
Excellent knowledge of written, read, and spoken English (required)<br>
</div></div></div><br>
<div><div><div><b>Background and experience</b></div></div><div><br>
<div><b>
Competencies and skills</b></div></div></div><br>
<div>
<div><ul><li>Minimum 8+ years&rsquo; experience in risk management, internal controls, governance &amp; compliance, or related roles within large, complex organizations</li>
<li>Strong experience designing and operating enterprise risk management and internal control frameworks</li>
<li>Experience supporting assurance activities, regulatory compliance, and remediation programs</li>
<li>Experience with business continuity planning and organizational resilience initiatives</li>
<li>Experience in the oil &amp; gas or energy sector, preferably upstream</li></ul><br>
</div>
<div><div><b>Soft</b><b>:
</b></div><ul><li>Strong analytical and structured thinking skills</li>
<li>High ethical standards and sound professional judgment</li>
<li>Ability to influence and challenge constructively</li>
<li>Strong stakeholder engagement and communication skills</li>
<li>Change leadership and continuous improvement mindset</li>
<li>Ability to operate effectively in complex, multi-stakeholder environments</li></ul><br>
<div></div>
<div><b>
Technical:
</b></div><ul><li>Enterprise risk management</li>
<li>Governance &amp; compliance (control environment focus)</li>
<li>Internal controls and assurance enablement</li>
<li>Business continuity management</li>
<li>Regulatory and government compliance</li></ul></div></div></div></div></div><p></p>

Expert Business Continuity

Estithmar Capital

<div>
 <p>
  The Risk Director is responsible for the independent design, implementation, and oversight of the firm&rsquo;s enterprise risk management framework. The role ensures that all material risks across asset management, private markets, advisory services, and cross-border fund structures are effectively identified, assessed, monitored, and mitigated in line with QFCRA regulations, internal governance standards, and the firm&rsquo;s approved risk appetite.
 </p>
 <p>
  Operating independently from business units, the Risk Director provides objective risk oversight and regularly reports to the CEO and Board Risk &amp; Audit Committee on the organization&rsquo;s risk exposure and control environment.
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <strong>
   Enterprise Risk Governance
  </strong>
 </p>
 <ul>
  <li>
   Design, implement, and maintain the firm-wide Risk Management Framework (RMF), covering:
  </li>
  <li>
   Market Risk
  </li>
  <li>
   Credit &amp; Counterparty Risk
  </li>
  <li>
   Operational Risk
  </li>
  <li>
   Liquidity &amp; Funding Risk
  </li>
  <li>
   Investment &amp; Portfolio Risk
  </li>
  <li>
   Legal, Regulatory &amp; Reputational Risk
  </li>
  <li>
   Develop and periodically review the Risk Appetite Statement in alignment with strategic objectives.
  </li>
  <li>
   Embed risk-adjusted return principles across all business lines, including private equity, discretionary portfolios, and structured funds.
  </li>
 </ul>
 <p>
  <strong>
   Risk Identification, Monitoring &amp; Controls
  </strong>
 </p>
 <ul>
  <li>
   Identify and assess emerging risks across business units, geographies, and investment structures.
  </li>
  <li>
   Establish and monitor Key Risk Indicators (KRIs) across portfolios, transactions, and counterparties.
  </li>
  <li>
   Lead stress testing, scenario analysis, and risk modeling exercises.
  </li>
  <li>
   Maintain a centralized Risk Register capturing incidents, breaches, and control gaps.
  </li>
 </ul>
 <p>
  <strong>
   Product &amp; Transaction Risk Oversight
  </strong>
 </p>
 <ul>
  <li>
   Provide independent risk review and approval for:
  </li>
  <li>
   New fund launches
  </li>
  <li>
   Private equity and direct investments
  </li>
  <li>
   Co-investments and SPV structures
  </li>
  <li>
   Institutional mandates and bespoke portfolios
  </li>
  <li>
   Evaluate risks related to concentration, leverage, liquidity mismatch, and high-risk jurisdictions.
  </li>
 </ul>
 <p>
  <strong>
   Portfolio &amp; Investment Risk Monitoring
  </strong>
 </p>
 <ul>
  <li>
   Oversee ongoing monitoring of AUM, portfolio exposures, and performance risk.
  </li>
  <li>
   Define and enforce exposure limits, stop-loss thresholds, and risk tolerances.
  </li>
  <li>
   Ensure compliance with investment mandates and diversification requirements.
  </li>
  <li>
   Partner with investment teams to implement hedging or portfolio restructuring strategies where required.
  </li>
 </ul>
 <p>
  <strong>
   Operational &amp; Technology Risk
  </strong>
 </p>
 <ul>
  <li>
   Assess critical processes, operational dependencies, and outsourcing risks.
  </li>
  <li>
   Oversee risk reviews related to systems, data security, fraud exposure, and business continuity.
  </li>
  <li>
   Collaborate with COO and IT on incident management, resilience planning, and control testing.
  </li>
 </ul>
 <p>
  <strong>
   Liquidity, Funding &amp; Counterparty Risk
  </strong>
 </p>
 <ul>
  <li>
   Monitor firm-level liquidity and short-term funding requirements.
  </li>
  <li>
   Define liquidity risk metrics across funds and investment structures.
  </li>
  <li>
   Evaluate exposures to banks, custodians, brokers, administrators, and SPVs.
  </li>
 </ul>
 <p>
  <strong>
   Reporting &amp; Board Engagement
  </strong>
 </p>
 <ul>
  <li>
   Prepare and present quarterly risk reports and dashboards to the CEO and Board Risk &amp; Audit Committee.
  </li>
  <li>
   Escalate breaches, significant incidents, and emerging macro or regulatory risks.
  </li>
  <li>
   Work closely with Internal Audit and Compliance to address findings and strengthen controls.
  </li>
 </ul>
 <p>
  <strong>
   Regulatory Engagement &amp; Compliance
  </strong>
 </p>
 <ul>
  <li>
   Ensure alignment with QFCRA rulebooks (GENE, PIIB, COND, AML/CFT).
  </li>
  <li>
   Support regulatory filings, disclosures, and reporting requirements.
  </li>
  <li>
   Act as the key point of contact during QFCRA inspections, audits, and thematic reviews.
  </li>
 </ul>
 <p>
  <strong>
   Qualifications &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s or Master&rsquo;s degree in Risk Management, Finance, Economics, or related field.
  </li>
  <li>
   10&ndash;12+ years of experience in enterprise risk management within financial services.
  </li>
  <li>
   Proven experience in asset management, private equity, or multi-asset investment platforms.
  </li>
  <li>
   Strong knowledge of QFCRA regulations, Basel principles, and international risk frameworks (COSO, ISO 31000).
  </li>
  <li>
   Experience managing risk across cross-border investment structures and funds is highly desirable.
  </li>
 </ul>
 <p>
  <strong>
   Core Competencies
  </strong>
 </p>
 <ul>
  <li>
   Strong analytical and quantitative risk assessment skills
  </li>
  <li>
   Executive-level communication and stakeholder management
  </li>
  <li>
   High integrity with independent judgment
  </li>
  <li>
   Ability to challenge senior stakeholders constructively
  </li>
  <li>
   Strong systems and data proficiency (risk tools, analytics platforms, advanced Excel)
  </li>
 </ul>
 <p>
  <strong>
   Regulatory Requirements
  </strong>
 </p>
 <ul>
  <li>
   Subject to approval as an Approved Individual (AI) by QFCRA (or equivalent).
  </li>
  <li>
   Must operate independently from revenue-generating functions.
  </li>
  <li>
   Direct reporting line to CEO and Board Risk &amp; Audit Committee required.
  </li>
 </ul>
 <p>
 </p>
</div>


Director of Risk Management

PepsiCo

<div>Overview:
<p><b>
We Are PepsiCo</b></p><p>
PepsiCo is a leading name in North Africa&rsquo;s food and beverage industry, where our products are enjoyed by consumers daily across the region. We offer a robust portfolio of beloved brands like PEPSI, SEVEN-UP, DORITOS, CHEETOS and CHIPSY, designed to cater to the tastes and preferences of consumers. With a focus on local sourcing, production, and distribution, PepsiCo provides essential support to local economies and partners closely with communities throughout the region.</p><p></p><p><b><br>
Guiding Vision and Regional Impact</b></p><p>
PepsiCo&rsquo;s vision aligns with our global goal to be the Leader in Beverages and Convenient Foods by Winning with PepsiCo Positive (pep+). This strategic transformation is committed to sustainable growth by putting people and the planet at the heart of our operations. In North Africa, this includes initiatives in responsible sourcing, waste reduction, and water conservation. Our regional programs empower local talent, boost employment, and provide support for local agriculture, particularly through partnerships with farmers and suppliers.</p><p></p><p><br>
 <b>Empowering Our People and Communities</b></p><p>
Our dynamic teams drive the PepsiCo culture in North Africa, embracing diversity and collaboration to solve local challenges and create innovative products. We are dedicated to fostering an inclusive workplace, one where every individual feels valued and empowered to be themselves. This commitment extends beyond our employees to positively impact the communities we serve, striving for shared growth and a healthier, more sustainable future for all.</p><p></p><p><b><br>
Diversity and Inclusion Commitment</b></p><p>
PepsiCo stands firmly behind our global commitment to diversity, equality, and human rights. We are proud to be an equal opportunity employer, ensuring a fair and welcoming workplace for all, regardless of age, gender, religion, disability, or any other characteristic. Our dedication to inclusion strengthens our workforce and helps drive our business forward, enriching both PepsiCo and the communities in North Africa.</p>
Responsibilities:
<p><b>
Global Control Standards</b></p><ul><li>
Partner with all functions to perform Risk Assessment on timely basis (at least once a year) for regular day to day business- and on spot when new process or project is introduced.</li><li>
 Ensure KC are designed effectively to cover the identified risks.</li><li>
Monitor the execution of Key Controls for each function circa on quarterly basis and report results to Audit Committee as well as recommend remediation action.</li><li>
 Support in testing internal control related to systems with PwC and IBM.</li><li>
Participate in ensuring CE is tested at least once a year and ensure remediation actions are in place.</li><li>
Ensure Process Owners and Control Owners have clear understanding of PepsiCo's Global Control Standard.</li></ul><p><b>
Enterprise Risk Management</b></p><ul><li>
 Leading on the Enterprise Risk Management agenda including risk identification with the risk owners and leadership team.</li><li>
Managing the annual risk survey and engagement with the corporate ERM team.</li><li>
 Reporting and monitoring the identified and potential enterprise risks.</li></ul><p><b>
Audit &amp; Compliance</b></p><ul><li>
Ensure business compliance with Statutory, Legal and Taxation requirements, PepsiCo corporate and local business policies &amp; procedures, and ethical business practices.</li><li>
Perform walkthroughs for all cycles across North Africa BU to ensure completeness, identify any process gap and enhance &amp; optimize process. Share the results with the GM and BU Controller.</li><li>
Maintain updated policies &amp; procedures and SoA.</li><li>
Perform sudden audits &amp; physical counts for all locations.</li><li>
 Handling the communication and requirements from Corporate Audit team as well as remediation plans identified during the audits.</li></ul><p><b>
Standardization and Simplification</b></p><ul><li>
 Work with all functions within the Company to analyze and identify process improvement opportunities in related business cycles.</li><li>
Ensure quarterly Self-testing is performed timely as per sector calendar and arrange with control owners across the BU and submit test results to sector.</li><li>
Benchmark audit findings in other markets and proactively discuss audit findings with process owners&rsquo; corrective action if need be.</li><li>
Communicate the results of the GCS testing to the Sector IC COE along with the root causes of identified deficiencies and remediation plans.</li><li>
Present audit findings, business process improvements and the related business impact in a clear and concise manner during the audit closing meeting with respective functions.</li></ul><p><b>
Compliance and Ethics</b></p><ul><li>
Participate in Speak investigation in the BU recommend action when it comes to control process improvement.</li><li>
Work closely with C&amp;E team to monitor the actions identified implementation across the BUs.</li><li>
 Review status update and investigation results with Sector/BU CEC.</li></ul>
Qualifications:
<ul><li>Minimum of 10 -12 years of experience in Finance (preferably multinational FMCG).</li><li>
Big 4 experience is a plus.</li><li>
Preferably a CPA Holder.</li><li>
Bachelor&rsquo;s degree in any relevant discipline.</li><li>
Fluency in both spoken &amp; written English &amp; Arabic language is required.</li><li>
Strong communication and stakeholder management skills.</li></ul></div>

Control & Reporting Manager - Internal Control

Search 10000+ Enterprise risk manager jobs near you this May. New roles added regularly across leading industries. Apply today.