it risk and assurance manager

بنك التعمير والإسكان HD Bank

<div>
 <p>
  <strong>
   <em>
    <u>
     Job Summary:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The
  <strong>
   IT Risk Management Unit Manager
  </strong>
  is responsible for
  <strong>
   identifying, assessing, mitigating, and monitoring IT-related risks
  </strong>
  within the organization. This role ensures that the bank's IT systems, infrastructure, and operations comply with
  <strong>
   risk management frameworks, regulatory requirements, and cybersecurity best practices
  </strong>
  to safeguard the organization from potential threats.
 </p>
 <p>
 </p>
 <p>
  <strong>
   <em>
    <u>
     Job Responsibilities:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Develop and enforce IT asset management policies and procedures.
  </li>
  <li>
   Conduct risk assessments to identify cybersecurity threats, operational vulnerabilities, and compliance gaps.
  </li>
  <li>
   Evaluate IT systems, applications, and processes to determine risk exposure and impact.
  </li>
  <li>
   Develop and maintain an IT risk register, tracking identified risks and their mitigation measures.
  </li>
  <li>
   Develop and implement IT risk management strategies and frameworks to minimize operational risks.
  </li>
  <li>
   Recommend security controls, technology enhancements, and process improvements to reduce IT risk exposure.
  </li>
  <li>
   Ensure disaster recovery (DR) and business continuity (BCP) plans are in place and tested regularly.
  </li>
  <li>
   Ensure IT risk management practices align with regulatory standards (e.g., GDPR, PCI DSS, ISO 27001, NIST, COBIT).
  </li>
  <li>
   Collaborate with internal and external auditors to address compliance requirements and risk assessments.
  </li>
  <li>
   Stay updated on IT risk regulatory changes and ensure necessary adjustments to risk management policies.
  </li>
  <li>
   Develop and oversee the IT incident response plan, ensuring swift and effective resolution of IT security incidents.
  </li>
  <li>
   Work with IT security teams to analyze and report security breaches, cyber threats, and system failures.
  </li>
  <li>
   Conduct post-incident evaluations to identify root causes and implement preventive measures.
  </li>
  <li>
   Work closely with senior IT leaders, cybersecurity teams, compliance officers, and risk managers to integrate IT risk management into business operations.
  </li>
  <li>
   Provide risk advisory and training to IT and business teams to enhance risk awareness.
  </li>
  <li>
   Act as the primary liaison for regulatory bodies, auditors, and external service providers regarding IT risk-related matters.
  </li>
  <li>
   Prepare and present IT risk reports, risk dashboards, and compliance updates to senior management and regulatory authorities.
  </li>
  <li>
   Maintain comprehensive documentation of risk management policies, procedures, and assessments.
  </li>
  <li>
   Conduct periodic risk reviews and IT audits to ensure alignment with best practices.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <em>
    <u>
     Job Qualifications:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
  </li>
  <li>
   <strong>
    Minimum 8+ years
   </strong>
   of experience in
   <strong>
    IT risk management, cybersecurity, or IT governance
   </strong>
   .
  </li>
  <li>
   Strong background in
   <strong>
    IT compliance, security frameworks, and enterprise risk management
   </strong>
   .
  </li>
  <li>
   Experience in
   <strong>
    managing IT risk programs, conducting IT risk assessments, and collaborating with auditors
   </strong>
   .
  </li>
 </ul>
 <p>
 </p>
</div>


IT Risk Management Unit Manager

Amazon Web Services (AWS)

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.
 <br/>
 <br/>
 The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures?
 <br/>
 <br/>
 The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements.
 <br/>
 <br/>
 We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization.
 <br/>
 <br/>
 Key job responsibilities
 <br/>
 <br/>
 Expertise &ndash; Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs
 <br/>
 <br/>
 Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.
 <br/>
 <br/>
 Delivery &ndash; Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.
 <br/>
 <br/>
 Insights - Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
 <br/>
 <br/>
 Ability to travel to customer sites as needed.
 <br/>
 <br/>
 <strong>
  About The Team
  <br/>
  <br/>
 </strong>
 AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.
 <br/>
 <br/>
 Diverse Experiences
 <br/>
 <br/>
 Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 <br/>
 <br/>
 Why AWS
 <br/>
 <br/>
 Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
 <br/>
 <br/>
 Work/Life Balance
 <br/>
 <br/>
 We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 <br/>
 <br/>
 Inclusive Team Culture
 <br/>
 <br/>
 Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.
 <br/>
 <br/>
 Mentorship and Career Growth
 <br/>
 <br/>
 We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 <br/>
 <br/>
 Hybrid Work
 <br/>
 <br/>
 We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible, hybrid work model near one of our Amazon offices.
 <br/>
 <br/>
 <strong>
  Basic Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years in IT security, compliance and risk management, data privacy, or security controls.
  </li>
  <li>
   3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.
  </li>
  <li>
   3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
  </li>
  <li>
   3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
  </li>
  <li>
   Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials
  </li>
  <li>
   Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.
  </li>
  <li>
   Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance.
  </li>
  <li>
   Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
  </li>
  <li>
   Demonstrated ability to think strategically about business, product, and technical challenges.
  </li>
  <li>
   Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.
   <br/>
   <br/>
  </li>
 </ul>
 Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.
 <br/>
 <br/>
 <br/>
 <strong>
  Company
 </strong>
 - Amazon Web Services EMEA Dubai FZ Branch
 <br/>
 <br/>
 Job ID: A10383756
</div>


Senior Assurance Consultant, AWS Security Assurance Services

Confidential Government

<div>
 <p>
  <strong>
   Senior Manager &ndash; Governance, Risk and Compliance (GRC)
  </strong>
 </p>
 <p>
  <strong>
   Standard Title:
  </strong>
  Risk &amp; Compliance Manager
 </p>
 <p>
  <strong>
   Company:
  </strong>
  Confidential Government Entity
 </p>
 <p>
  <strong>
   Location:
  </strong>
  Riyadh, Saudi Arabia
 </p>
 <p>
  <strong>
   Workplace Type:
  </strong>
  On-site
 </p>
 <p>
  <strong>
   Employment Type:
  </strong>
  Full-time
 </p>
 <p>
  <strong>
   Seniority Level:
  </strong>
  Mid&ndash;Senior Level
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Purpose
  </strong>
 </p>
 <p>
  The Senior Manager &ndash; Governance, Risk and Compliance (GRC) is responsible for leading the design, implementation, and continuous enhancement of governance structures, enterprise risk management, and compliance systems. The role ensures that institutional practices align with applicable laws, regulatory requirements, and approved governance frameworks, while supporting organizational effectiveness, risk resilience, ethical conduct, and sound decision-making.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Accountabilities &amp; Responsibilities
  </strong>
 </p>
 <p>
  <strong>
   1. Governance Framework &amp; Institutional Oversight
  </strong>
 </p>
 <ul>
  <li>
   Develop, review, and maintain governance frameworks, charters, policies, and procedures to ensure clarity of authority, roles, and accountability.
  </li>
  <li>
   Ensure consistent application of governance principles across all organizational levels.
  </li>
  <li>
   Provide advisory support to executive management and governance committees on governance-related matters.
  </li>
  <li>
   Oversee documentation and enforcement of delegation of authority matrices and decision-rights frameworks.
  </li>
  <li>
   Promote ethical standards, conflict-of-interest management, and institutional integrity.
  </li>
 </ul>
 <p>
  <strong>
   2. Enterprise Risk Management (ERM)
  </strong>
 </p>
 <ul>
  <li>
   Establish and lead an integrated Enterprise Risk Management framework covering strategic, operational, financial, regulatory, and reputational risks.
  </li>
  <li>
   Direct risk identification, assessment, prioritization, and aggregation processes.
  </li>
  <li>
   Maintain and update the enterprise risk register and ensure alignment with organizational objectives.
  </li>
  <li>
   Define risk appetite and tolerance levels in coordination with senior leadership.
  </li>
  <li>
   Monitor emerging risks and ensure proactive mitigation strategies are in place.
  </li>
  <li>
   Prepare comprehensive risk reporting for senior management and oversight committees.
  </li>
 </ul>
 <p>
  <strong>
   3. Compliance &amp; Regulatory Management
  </strong>
 </p>
 <ul>
  <li>
   Develop and implement organization-wide compliance programs, policies, and controls.
  </li>
  <li>
   Ensure full compliance with all applicable laws, regulations, directives, and supervisory requirements.
  </li>
  <li>
   Monitor regulatory developments and assess their impact on organizational policies and operations.
  </li>
  <li>
   Coordinate with regulators, oversight bodies, and external stakeholders as required.
  </li>
  <li>
   Oversee management of compliance breaches, investigations, corrective actions, and preventive measures.
  </li>
  <li>
   Promote compliance awareness, training, and a culture of accountability.
  </li>
 </ul>
 <p>
  <strong>
   4. Internal Controls, Audit &amp; Assurance
  </strong>
 </p>
 <ul>
  <li>
   Design and strengthen internal control frameworks to safeguard assets, ensure data integrity, and enhance operational effectiveness.
  </li>
  <li>
   Coordinate with internal and external audit functions during planning, execution, and follow-up.
  </li>
  <li>
   Review audit findings and ensure timely implementation of remediation plans.
  </li>
  <li>
   Monitor control effectiveness and drive continuous improvement initiatives.
  </li>
  <li>
   Support quality assurance efforts to enhance compliance, efficiency, and governance maturity.
  </li>
 </ul>
 <p>
  <strong>
   5. Leadership, Capability Building &amp; Stakeholder Management
  </strong>
 </p>
 <ul>
  <li>
   Lead, coach, and develop direct reports and GRC professionals.
  </li>
  <li>
   Build internal capabilities in governance, risk management, and compliance across departments.
  </li>
  <li>
   Act as a trusted advisor to senior leadership and key stakeholders.
  </li>
  <li>
   Facilitate cross-functional collaboration to embed GRC practices into core business processes.
  </li>
  <li>
   Contribute to organizational resilience, sustainability, and long-term value creation.
  </li>
 </ul>
 <p>
  <strong>
   Qualifications &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Business Administration, Finance, Accounting, Law, Risk Management, or a related discipline (Master&rsquo;s degree preferred).
  </li>
  <li>
   8&ndash;12 years of progressively responsible experience in governance, risk, compliance, audit, or related functions.
  </li>
  <li>
   Prior experience within government entities or regulated environments is strongly preferred.
  </li>
  <li>
   Strong understanding of governance principles, risk management methodologies, and compliance frameworks.
  </li>
  <li>
   Professional certifications are an advantage (e.g., CRMA, CIA, CISA, CERM, CGR, ISO 31000).
  </li>
 </ul>
 <p>
  <strong>
   Core Competencies &amp; Skills
  </strong>
 </p>
 <ul>
  <li>
   Strategic thinking and sound professional judgment.
  </li>
  <li>
   Advanced analytical, risk assessment, and problem-solving skills.
  </li>
  <li>
   Strong leadership, communication, and influencing abilities.
  </li>
  <li>
   High ethical standards, independence, and confidentiality.
  </li>
  <li>
   Excellent report writing and presentation skills.
  </li>
  <li>
   Fluency in Arabic and English.
  </li>
 </ul>
 <p>
  <strong>
   Alignment &amp; Compliance (Headlines Only)
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Saudi Vision 2030
   </strong>
  </li>
  <li>
   <strong>
    National Governance Frameworks
   </strong>
  </li>
  <li>
   <strong>
    Regulatory &amp; Supervisory Authority Requirements
   </strong>
  </li>
  <li>
   <strong>
    Public Sector Accountability &amp; Transparency Standards
   </strong>
  </li>
 </ul>
 <p>
  <strong>
   Recommended Industries
  </strong>
 </p>
 <ul>
  <li>
   Government Administration
  </li>
  <li>
   Investment Management
  </li>
  <li>
   Real Estate
  </li>
  <li>
   Retail
  </li>
 </ul>
 <p>
  <strong>
   Job Functions
  </strong>
 </p>
 <ul>
  <li>
   Risk &amp; Compliance
  </li>
  <li>
   Accounting / Auditing
  </li>
  <li>
   Quality Assurance
  </li>
 </ul>
 <p>
 </p>
</div>


Senior Manager - Governance, Risk and Compliance

Bank Alfalah Limited

<div>
 <p>
  Job Purpose:
 </p>
 <p>
  The Governance, Risk &amp; Compliance Manager is responsible for establishing, managing, and continuously improving the organization&rsquo;s information security governance, risk management, and compliance framework. The role ensures alignment with regulatory requirements, industry standards, and business objectives, while providing strategic oversight, leadership, and assurance to senior management
 </p>
 <p>
  <br/>
 </p>
 <p>
  Responsibilities:
 </p>
 <ul>
  <li>
   Support the execution of internal and external information security audits in collaboration with the Team lead.
  </li>
  <li>
   Interpret and implement regulatory requirements and liaise with internal teams to ensure compliance.
  </li>
  <li>
   Facilitate coordination between business and technical teams to conduct comprehensive security reviews.
  </li>
  <li>
   Work with stakeholders to recommend and track risk mitigation measures, ensuring timely closure of identified gaps/observations.
  </li>
  <li>
   Maintain and oversee the information security risk register.
  </li>
  <li>
   Define and maintain risk management framework including risk assessment methodology and risk appetite alignment
  </li>
  <li>
   Coordinate with IT/security teams for mitigation strategies.
  </li>
  <li>
   Assist TL in preparation of reports/presentations for management reporting and ITSC/BITC.
  </li>
  <li>
   Lead and support the development, implementation, and continuous improvement of information security policies, procedures, and governance frameworks to ensure alignment with industry standards and regulatory requirements.
  </li>
  <li>
   Define and monitor KPIs/KRIs to measure effectiveness of security controls and risk posture
  </li>
  <li>
   Ensure organizational policies, processes, and operations achieve full compliance with SBP regulatory requirements, while maintaining alignment with cross‑border regulations.
  </li>
  <li>
   Oversee cyber security and information security (NESA Compliance) programs.
  </li>
  <li>
   Lead risk assessments and ensure compliance of vendors with security requirements
  </li>
  <li>
   Assist in finding technical gaps/weaknesses in BAFL environment through gap assessment exercise.
  </li>
  <li>
   Lead, and manage the IS GRC team in absence of Team Lead
  </li>
  <li>
   Manage risk acceptance process and ensure proper approval from the management
  </li>
  <li>
   Conduct cybersecurity awareness sessions bi-annually for employees to enhance their knowledge of security best practices, helping them recognize and prevent social engineering threats such as phishing, and promoting safer digital behavior
  </li>
  <li>
   Coordinate and manage regulatory inspections and ensure timely closure of observations
  </li>
 </ul>
 <p>
 </p>
</div>


Senior Manager Information Security

Qiddiya Investment Company

<div><p>The Senior Manager &ndash; Audit Preparedness, Governance &amp; Assurance for the MBS Stadium project at Qiddiya Investment Company will be responsible for ensuring the project is audit-ready at all times across its delivery lifecycle. This office-based role acts as the central liaison between the MBS Stadium project team and internal and external audit functions, supporting governance frameworks, assurance activities, and compliance obligations. The Senior Manager will work closely with project leadership, finance, procurement, and corporate governance teams to ensure robust documentation, reporting, and control environments are maintained throughout the project.</p><ul><li>
Serve as the primary point of contact between the MBS Stadium project and internal audit, external audit, and regulatory bodies.</li><li>
Develop and maintain an audit preparedness framework ensuring the project is ready for scheduled and ad hoc audits at all times.</li><li>
Coordinate audit responses, track findings, and manage the timely close-out of audit recommendations and corrective actions.</li><li>
Support the establishment and maintenance of project governance frameworks, policies, and control procedures in line with QIC standards.</li><li>
Conduct assurance reviews across key project functions including procurement, finance, contracts, and reporting to identify compliance gaps and risks.</li><li>
Prepare clear and accurate audit documentation, evidence packs, and management responses on behalf of the project team.</li><li>
Monitor adherence to regulatory, contractual, and corporate compliance requirements applicable to the project.</li><li>
Liaise with QIC's corporate governance, risk, and compliance functions to align project-level assurance activities with company-wide frameworks.</li><li>
Produce regular governance and assurance reports for project leadership and relevant stakeholder committees.</li><li>
Drive a culture of transparency, accountability, and continuous improvement across the project team.</li></ul><p></p><b><br>
Requirements</b><br>
<p></p><ul><li>
Bachelor's degree in Accounting, Finance, Business Administration, Engineering, or a related field.</li><li>
Relevant professional certifications highly desirable e.g. CIA (Certified Internal Auditor), CISA, CPA, ACCA, or equivalent.</li><li>
Minimum of 8 years of experience in audit, assurance, governance, or compliance roles, preferably within large-scale construction, infrastructure, or giga/mega projects.</li><li>
Strong understanding of internal audit methodologies, governance frameworks, and risk-based assurance approaches.</li><li>
Experience liaising with internal and external audit teams and managing audit cycles end-to-end.</li><li>
Excellent written and verbal communication skills with the ability to produce high-quality reports and documentation for senior audiences.</li><li>
Highly organised, detail-oriented, and able to manage multiple audit and assurance workstreams simultaneously.</li><li>
Ability to work collaboratively across multidisciplinary project and corporate teams in a fast-paced environment.</li></ul></div>

Senior Manager - Governance & Assurance MBS Stadium (SPA5)

OQ Chemicals

<div><div><div><div><div><div><b>Job title</b></div></div><div><br>
<div>
Expert of Business Continuity</div></div><div><br>
<div><b>
Grade</b></div></div></div><div></div><div><br>
<div>
<div><b>Stream</b></div></div><div><br>
<div>
Finance &amp; Procurement</div></div><div><br>
<div><b>
Function</b></div></div><div><br>
<div>
Finance - Enterprise Risk Management and Business Continuity</div></div></div><div><br>
<div>
<div><b>Location</b></div></div><div><br>
<div>
Oman &ndash; Muscat<br>
</div></div><div><div><b>Budget control</b></div></div><div><br>
<div>
*OPEX and/or CAPEX and/or Revenue amount as relevant*</div></div></div><div><br>
<div>
<div><b>Reporting to</b></div></div><div><br>
<div>
Head of Enterprise Risk Management and Business Continuity<br>
</div></div><div><div><b>Direct Reports<br>
</b></div></div><div><ul><li></li></ul></div></div><div><br>
<div>
<div><b>Job purpose
</b></div><div>Proactive Business Continuity Expert with solid working knowledge of Business Continuity Management, Crisis Management, Disaster Management, and IT Disaster Recovery. The role will manage end-to-end operational disruption scenarios, including cyber incidents, process interruptions, facility outages, and supply chain disruptions, ensuring readiness, response coordination, and continual improvement of OQEP&rsquo;s resilience capabilities. The role provides independent oversight and assurance enablement by establishing robust governance, assurance, and internal control environment, while supporting compliant execution and organizational resilience in alignment with internal policies, international standards, and government and regulatory requirements.</div><br>
<div></div>
<div>
The position will act in accordance with the OQEP&rsquo;s Mission, Vision, Values &amp; Strategies, as well as, policies, guidelines, and international standards, supported by an IT Technology platform, QHSE &amp; Energy Management System requirements standards, Omani&rsquo;s government &amp; other legal justifications, and best international practices in consonance with national objectives.</div></div></div><div><br>
<div>
<div><b>Main tasks and responsibilities</b><b><br>
</b></div><div></div><ul><li>Develop and maintain BCM, incident response, and crisis management strategies, frameworks, plans, policies, procedures, and programs in line with the defined strategy and stakeholder requirements.</li>
<li>Perform business impact analyses (BIA) identify critical processes, dependencies, and recovery requirements</li>
<li>Ensure business continuity and recovery plans are developed, maintained, and tested</li>
<li>Plan, facilitate, and evaluate exercises (tabletop, simulation, call-tree, and recovery tests) to enhance preparedness; document lessons learned and track closure of actions.</li>
<li>Support crisis preparedness and organizational resilience initiatives in coordination with relevant stakeholders</li>
<li>Act as the enterprise owner of business continuity governance, ensuring alignment between BC plans, crisis management protocols, and enterprise risk assessments</li>
<li>Monitor evolving practices in business continuity, disaster recovery, and crisis management; share knowledge and recommend enhancements to improve maturity.</li>
<li>Support crisis and BCM specialists on operational and strategic activities, including readiness assessments, program reporting, and stakeholder engagement.</li>
<li>Support solution development and business development in BCM/DR/crisis management, including preparing proposals and identifying opportunities.</li>
<li>Support the team in managing enterprise risk management
 </li><li>Develop, maintain, and update policies, standards, and procedures related to risk management, internal controls, governance &amp; compliance, and business continuity</li>
<li>Ensure alignment with applicable government, regulatory, and partner requirements</li>
<li>Monitor regulatory developments affecting risk, control, and continuity obligations and assess organizational impact</li>
<li>Coordinate regulatory-driven risk and control assessments with Finance and other corporate functions to ensure consistent interpretation and compliance</li>
<li>Own the internal control framework aligned with recognized standards (e.g. COSO)</li>
<li>Lead control risk assessments and prioritize remediation of control weaknesses</li>
<li>Maintain control documentation, including process narratives, risk-control matrices, and control libraries</li>
<li>Track remediation actions and report on control effectiveness and maturity</li>
<li>Coordinate with Internal Audit and External Audit to support assurance activities without duplicating assurance ownership</li>
<li>Own enterprise-level control deficiency tracking and remediation reporting, including coordination with Financial Control and process owners</li>
<li>Perform other related duties as assigned.</li></ul></div><br>
</div><br>
<div><div><div><b>Key interactions</b></div>
<div><b>
Internal:</b> Head of ERM &amp; BC, VP Finance, Financial Control, Corporate Planning &amp; Performance, Business Finance (Operated &amp; Non-Operated Assets), Internal Audit, Legal, HSE, Operations and PT&amp;C</div>
<div><b>
External</b>: Regulators and government entities, External auditors and advisors (risk, control, and continuity matters)</div></div></div><div><br>
<div>
<div><b>Notable Working Conditions. </b>Office environment, intensive computer screen use, sporadic visits to operation site.</div></div></div><div><br>
<div>
<div><b>Education requirements</b></div></div><div><br>
<p>
Bachelor's degree in Business Administration, Finance, Risk Management, Engineering, or related field.</p></div></div><div><br>
<div>
<div><b>Language</b></div></div><div><br>
<div>
Excellent knowledge of written, read, and spoken English (required)<br>
</div></div></div><br>
<div><div><div><b>Background and experience</b></div></div><div><br>
<div><b>
Competencies and skills</b></div></div></div><br>
<div>
<div><ul><li>Minimum 8+ years&rsquo; experience in risk management, internal controls, governance &amp; compliance, or related roles within large, complex organizations</li>
<li>Strong experience designing and operating enterprise risk management and internal control frameworks</li>
<li>Experience supporting assurance activities, regulatory compliance, and remediation programs</li>
<li>Experience with business continuity planning and organizational resilience initiatives</li>
<li>Experience in the oil &amp; gas or energy sector, preferably upstream</li></ul><br>
</div>
<div><div><b>Soft</b><b>:
</b></div><ul><li>Strong analytical and structured thinking skills</li>
<li>High ethical standards and sound professional judgment</li>
<li>Ability to influence and challenge constructively</li>
<li>Strong stakeholder engagement and communication skills</li>
<li>Change leadership and continuous improvement mindset</li>
<li>Ability to operate effectively in complex, multi-stakeholder environments</li></ul><br>
<div></div>
<div><b>
Technical:
</b></div><ul><li>Enterprise risk management</li>
<li>Governance &amp; compliance (control environment focus)</li>
<li>Internal controls and assurance enablement</li>
<li>Business continuity management</li>
<li>Regulatory and government compliance</li></ul></div></div></div></div></div><p></p>

Expert Business Continuity

Deloitte

<div><div><div><b>Location
</b></div><p>Riyadh
</p></div><div><div><div><p><b>Audit &amp; Assurance | IT Audit - Manager</b></p><p><b>
Building Tomorrow&rsquo;s Team Today &ndash; Join Our Talent Pipeline: At Deloitte, </b>we&rsquo;re always on the lookout for talented individuals to join our growing team. Submit your resume to our talent pipeline and be among the first to hear about exciting future opportunities. We look forward to connecting with you!<br>
</p><p></p><br>
<p><b>About Deloitte: </b>When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including Best Employer in the Middle East, and Best Consulting Firm, and the Middle East Training &amp; Development Excellence Award.<br>
</p><p></p><br>
<p><b>Our Purpose:
</b></p><p>Deloitte makes an impact that matters. Every day we challenge ourselves to do what matters most&mdash;for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations and supporting our communities.<br>
</p><p></p><br>
<p><b>Our shared values guide the way we behave to make a positive, enduring impact:<br>
</b></p><p></p><br>
<ul><li>Lead the way
</li><li>Serve with integrity
</li><li>Take care of each other
</li><li>Foster inclusion
</li><li>Collaborate for measurable impact</li></ul><p><b>
Audit &amp; Assurance | IT Audit - Manager</b></p><p></p><p>
During your tenure as an IT Audit Manager, you will demonstrate your capabilities in the following areas:</p><ul>
<li>Identify and evaluate business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement
</li><li>Actively participate in decision making with engagement management and seek to understand the broader impact of current decisions
</li><li>Generate innovative ideas and challenge the status quo
</li><li>Facilitate use of technology-based tools or methodologies to review, design and/or implement products and services
</li><li>Play substantive/lead role and engagement planning, economics, and billing
</li><li>Assist in retention of professionals
</li><li>Participate in training efforts
</li><li>Identify opportunities to cross-sell other services
</li><li>Demonstrate a general knowledge of market trends, competitor activities, Deloitte &amp; Touche products and service lines
</li><li>Build and nurture positive working relationships with clients with the intention to exceed client expectations
</li><li>Understand clients' business environment and basic risk management approaches
</li><li>Participate in proposal development efforts
</li><li>Participate in &quot;add-on&quot; sales to client
</li><li>Membership and visibility in professional &amp; civic organizations</li>
</ul><p><b>Leadership capabilities:</b></p><ul>
<li>Builds own understanding of our purpose and values; explores opportunities for impact
</li><li>Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent
</li><li>Understands expectations and demonstrates personal accountability for keeping performance on track
</li><li>Actively focuses on developing effective communication and relationship-building skills
</li><li>Understands how their daily work contributes to the priorities of the team and the business</li>
</ul><p><b>Qualifications:</b></p><ul>
<li>BA/BS in Business Administration, Accounting, Management Information Systems, Computer Science or Computer Engineering, minor in accounting or any accounting experience would be a plus.
</li><li>CISA required, CPA &amp; CIA certification is a plus
</li><li>8+ years of Information Technology Auditing experience which includes experience in testing General IT controls, Information security, change management, data center and network operations.
</li><li>Understanding of key database technologies to be able to conduct and manage testing around system reports integrity, accuracy and completeness, and high level understanding of financial audits.
</li><li>SAP, Oracle or PeopleSoft controls experience desirable
</li><li>Experience with Sarbanes-Oxley and/or COSO is a plus
</li><li>Advanced understanding of business processes, internal control risk management, IT controls and related standards
</li><li>Experience with accounting control related issues
</li><li>Strong technical and/or management background in technical systems/environments
</li><li>Demonstrated ability to plan and manage engagements along with ensuring deliverables meet work plan specifications and deadlines. Prior project management experience.
</li><li>Successful experience identifying controls, developing, and executing test plans
</li><li>Demonstrated ability to write report segments and to participate in presentations
</li><li>Big 4 or other consulting firm experience preferred.
</li></ul>#LI-NN1</div></div></div></div>

Manager | IT Audit | Audit & Assurance | Riyadh

Search 10000+ It risk and assurance manager jobs near you this May. New roles added regularly across leading industries. Apply today.