manager risk management

Accounting Bookeepers

Zahid Jamil &amp; Co. is looking for a highly skilled and analytical Manager Risk to join its professional team in Karachi. The ideal candidate will be responsible for supporting enterprise risk management activities, strengthening internal controls, and assisting in the development of risk mitigation strategies across the organization.Requirements:<ul><li>Qualification: FRC / MA or equivalent </li><li>Experience: 4&ndash;5 years of relevant experience in risk management, internal controls, compliance, or audit</li><li>Strong understanding of enterprise risk management (ERM) frameworks and methodologies</li><li>Ability to analyze operational, financial, and compliance risks effectively</li><li>Strong reporting, communication, and stakeholder management skills</li></ul>Key Responsibilities:<ul><li>Develop, implement, and maintain enterprise risk management frameworks and policies</li><li>Identify, assess, and monitor key organizational risks</li><li>Prepare periodic risk assessment reports and dashboards for management</li><li>Coordinate with internal departments to ensure effective risk mitigation measures</li><li>Support compliance reviews and internal control improvements</li><li>Assist in risk-based assessments and advisory initiatives</li></ul>Pay: From Rs150,000.00 per monthWork Location: In person

Manager Risk

بنك التعمير والإسكان HD Bank

<div>
 
 
 
 
 Job Summary:
 
 
 
 
 
 
 
 
 The
 
 IT Risk Management Unit Manager
 
 is responsible for
 
 identifying, assessing, mitigating, and monitoring IT-related risks
 
 within the organization. This role ensures that the bank's IT systems, infrastructure, and operations comply with
 
 risk management frameworks, regulatory requirements, and cybersecurity best practices
 
 to safeguard the organization from potential threats.
 
 
 
 
 
 
 
 Job Responsibilities:
 
 
 
 
 
 
 
 <ul>
 <li>
 Develop and enforce IT asset management policies and procedures.
 </li>
 <li>
 Conduct risk assessments to identify cybersecurity threats, operational vulnerabilities, and compliance gaps.
 </li>
 <li>
 Evaluate IT systems, applications, and processes to determine risk exposure and impact.
 </li>
 <li>
 Develop and maintain an IT risk register, tracking identified risks and their mitigation measures.
 </li>
 <li>
 Develop and implement IT risk management strategies and frameworks to minimize operational risks.
 </li>
 <li>
 Recommend security controls, technology enhancements, and process improvements to reduce IT risk exposure.
 </li>
 <li>
 Ensure disaster recovery (DR) and business continuity (BCP) plans are in place and tested regularly.
 </li>
 <li>
 Ensure IT risk management practices align with regulatory standards (e.g., GDPR, PCI DSS, ISO 27001, NIST, COBIT).
 </li>
 <li>
 Collaborate with internal and external auditors to address compliance requirements and risk assessments.
 </li>
 <li>
 Stay updated on IT risk regulatory changes and ensure necessary adjustments to risk management policies.
 </li>
 <li>
 Develop and oversee the IT incident response plan, ensuring swift and effective resolution of IT security incidents.
 </li>
 <li>
 Work with IT security teams to analyze and report security breaches, cyber threats, and system failures.
 </li>
 <li>
 Conduct post-incident evaluations to identify root causes and implement preventive measures.
 </li>
 <li>
 Work closely with senior IT leaders, cybersecurity teams, compliance officers, and risk managers to integrate IT risk management into business operations.
 </li>
 <li>
 Provide risk advisory and training to IT and business teams to enhance risk awareness.
 </li>
 <li>
 Act as the primary liaison for regulatory bodies, auditors, and external service providers regarding IT risk-related matters.
 </li>
 <li>
 Prepare and present IT risk reports, risk dashboards, and compliance updates to senior management and regulatory authorities.
 </li>
 <li>
 Maintain comprehensive documentation of risk management policies, procedures, and assessments.
 </li>
 <li>
 Conduct periodic risk reviews and IT audits to ensure alignment with best practices.
 </li>
 </ul>
 
 
 
 
 
 
 
 Job Qualifications:
 
 
 
 
 
 
 
 <ul>
 <li>
 Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
 </li>
 <li>
 
 Minimum 8+ years
 
 of experience in
 
 IT risk management, cybersecurity, or IT governance
 
 .
 </li>
 <li>
 Strong background in
 
 IT compliance, security frameworks, and enterprise risk management
 
 .
 </li>
 <li>
 Experience in
 
 managing IT risk programs, conducting IT risk assessments, and collaborating with auditors
 
 .
 </li>
 </ul>
 
 
</div>

IT Risk Management Unit Manager

Confidential Government

<div>
 
 
 Senior Manager &ndash; Governance, Risk and Compliance (GRC)
 
 
 
 
 Standard Title:
 
 Risk &amp; Compliance Manager
 
 
 
 Company:
 
 Confidential Government Entity
 
 
 
 Location:
 
 Riyadh, Saudi Arabia
 
 
 
 Workplace Type:
 
 On-site
 
 
 
 Employment Type:
 
 Full-time
 
 
 
 Seniority Level:
 
 Mid&ndash;Senior Level
 
 
 
 
 
 
 Job Purpose
 
 
 
 The Senior Manager &ndash; Governance, Risk and Compliance (GRC) is responsible for leading the design, implementation, and continuous enhancement of governance structures, enterprise risk management, and compliance systems. The role ensures that institutional practices align with applicable laws, regulatory requirements, and approved governance frameworks, while supporting organizational effectiveness, risk resilience, ethical conduct, and sound decision-making.
 
 
 
 
 
 
 Key Accountabilities &amp; Responsibilities
 
 
 
 
 1. Governance Framework &amp; Institutional Oversight
 
 
 <ul>
 <li>
 Develop, review, and maintain governance frameworks, charters, policies, and procedures to ensure clarity of authority, roles, and accountability.
 </li>
 <li>
 Ensure consistent application of governance principles across all organizational levels.
 </li>
 <li>
 Provide advisory support to executive management and governance committees on governance-related matters.
 </li>
 <li>
 Oversee documentation and enforcement of delegation of authority matrices and decision-rights frameworks.
 </li>
 <li>
 Promote ethical standards, conflict-of-interest management, and institutional integrity.
 </li>
 </ul>
 
 
 2. Enterprise Risk Management (ERM)
 
 
 <ul>
 <li>
 Establish and lead an integrated Enterprise Risk Management framework covering strategic, operational, financial, regulatory, and reputational risks.
 </li>
 <li>
 Direct risk identification, assessment, prioritization, and aggregation processes.
 </li>
 <li>
 Maintain and update the enterprise risk register and ensure alignment with organizational objectives.
 </li>
 <li>
 Define risk appetite and tolerance levels in coordination with senior leadership.
 </li>
 <li>
 Monitor emerging risks and ensure proactive mitigation strategies are in place.
 </li>
 <li>
 Prepare comprehensive risk reporting for senior management and oversight committees.
 </li>
 </ul>
 
 
 3. Compliance &amp; Regulatory Management
 
 
 <ul>
 <li>
 Develop and implement organization-wide compliance programs, policies, and controls.
 </li>
 <li>
 Ensure full compliance with all applicable laws, regulations, directives, and supervisory requirements.
 </li>
 <li>
 Monitor regulatory developments and assess their impact on organizational policies and operations.
 </li>
 <li>
 Coordinate with regulators, oversight bodies, and external stakeholders as required.
 </li>
 <li>
 Oversee management of compliance breaches, investigations, corrective actions, and preventive measures.
 </li>
 <li>
 Promote compliance awareness, training, and a culture of accountability.
 </li>
 </ul>
 
 
 4. Internal Controls, Audit &amp; Assurance
 
 
 <ul>
 <li>
 Design and strengthen internal control frameworks to safeguard assets, ensure data integrity, and enhance operational effectiveness.
 </li>
 <li>
 Coordinate with internal and external audit functions during planning, execution, and follow-up.
 </li>
 <li>
 Review audit findings and ensure timely implementation of remediation plans.
 </li>
 <li>
 Monitor control effectiveness and drive continuous improvement initiatives.
 </li>
 <li>
 Support quality assurance efforts to enhance compliance, efficiency, and governance maturity.
 </li>
 </ul>
 
 
 5. Leadership, Capability Building &amp; Stakeholder Management
 
 
 <ul>
 <li>
 Lead, coach, and develop direct reports and GRC professionals.
 </li>
 <li>
 Build internal capabilities in governance, risk management, and compliance across departments.
 </li>
 <li>
 Act as a trusted advisor to senior leadership and key stakeholders.
 </li>
 <li>
 Facilitate cross-functional collaboration to embed GRC practices into core business processes.
 </li>
 <li>
 Contribute to organizational resilience, sustainability, and long-term value creation.
 </li>
 </ul>
 
 
 Qualifications &amp; Experience
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Business Administration, Finance, Accounting, Law, Risk Management, or a related discipline (Master&rsquo;s degree preferred).
 </li>
 <li>
 8&ndash;12 years of progressively responsible experience in governance, risk, compliance, audit, or related functions.
 </li>
 <li>
 Prior experience within government entities or regulated environments is strongly preferred.
 </li>
 <li>
 Strong understanding of governance principles, risk management methodologies, and compliance frameworks.
 </li>
 <li>
 Professional certifications are an advantage (e.g., CRMA, CIA, CISA, CERM, CGR, ISO 31000).
 </li>
 </ul>
 
 
 Core Competencies &amp; Skills
 
 
 <ul>
 <li>
 Strategic thinking and sound professional judgment.
 </li>
 <li>
 Advanced analytical, risk assessment, and problem-solving skills.
 </li>
 <li>
 Strong leadership, communication, and influencing abilities.
 </li>
 <li>
 High ethical standards, independence, and confidentiality.
 </li>
 <li>
 Excellent report writing and presentation skills.
 </li>
 <li>
 Fluency in Arabic and English.
 </li>
 </ul>
 
 
 Alignment &amp; Compliance (Headlines Only)
 
 
 <ul>
 <li>
 
 Saudi Vision 2030
 
 </li>
 <li>
 
 National Governance Frameworks
 
 </li>
 <li>
 
 Regulatory &amp; Supervisory Authority Requirements
 
 </li>
 <li>
 
 Public Sector Accountability &amp; Transparency Standards
 
 </li>
 </ul>
 
 
 Recommended Industries
 
 
 <ul>
 <li>
 Government Administration
 </li>
 <li>
 Investment Management
 </li>
 <li>
 Real Estate
 </li>
 <li>
 Retail
 </li>
 </ul>
 
 
 Job Functions
 
 
 <ul>
 <li>
 Risk &amp; Compliance
 </li>
 <li>
 Accounting / Auditing
 </li>
 <li>
 Quality Assurance
 </li>
 </ul>
 
 
</div>

Senior Manager - Governance, Risk and Compliance

U.S. Bank

<div>At U.S. Bank, we&rsquo;re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at&mdash;all from Day One.<h2 class="jobSectionHeader">
Job Description</h2><div>
U.S. Bank is seeking an Operational Risk Review (ORR) Technology Manager (&quot;Manager&quot;) responsible for leading a team of Lead Analyst(s) and Analyst(s) (collectively &ldquo;Analysts&rdquo;) in the administration and execution of review activities within Independent Risk Review and Assessment (IRRA), a centralized second line of defense independent review function. This role offers an exciting opportunity to drive the continued growth, enhancement, and delivery of IRRA&rsquo;s ORR program. 
 
ORR provides risk-based review and effective challenge of the Company's operational risk (inclusive of technology risk), and operational risk-related processes and controls associated with the products and services offered across all business lines and enabling functions. Based on the Company's enterprise risk taxonomy, in-scope operational risk categories include: Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk mitigation, process, and control review activities include planning and scoping, design and execution, reporting and rating, and Issue creation and validation. 
 
Key roles and responsibilities of the ORR Technology Manager include working with business lines and other Risk, Compliance, and Audit professionals across the Company to evaluate processes and controls to ensure an effective risk management framework. The ORR Technology Manager is responsible for directly managing a team of Lead Analyst(s) and Analyst(s), including overseeing review activities, timely completion of planned reviews, conducting performance management, and overall staff development. The Manager leads and oversees projects and activities to confirm compliance with internal policies, industry standards, and applicable laws and regulations related to technology, business resiliency, data governance, cyber, systems, artificial intelligence (AI), and information security. Through review performance, the Manager is responsible for the identification of gaps, weaknesses, and risk exposures within the control and process environment. If gaps are identified, the Manager will partner with the business line and Risk Management groups to recommend and influence solutions to mitigate operational risks. The Manager is responsible will deliver effective verbal and written communication of review results to the ORR Senior Manager, including draft Issues and Reports, and will respond to and/or escalation of significant risks, as appropriate.<div>
Basic Qualifications 
<ul><li>Bachelor's degree, or equivalent work experience</li><li>Typically more than 10 years of applicable experience</li></ul></div>
Preferred Skills/Experience<ul><li>Proven leadership skills.</li><li>Subject Matter Expert or advanced knowledge of technology, business resiliency, systems, data governance, cyber, and information security risks as well as industry trends that impact Bank operations.</li><li>Thorough understanding of risk management standards, the common definition of internal controls, and how control frameworks are designed and operate to mitigate risks.</li><li>Deep understanding of the business line&rsquo;s operations, products, services, systems, and associated risks.</li><li>Deep business acumen and credibility to help business line(s) proactively identify risks and address changing risk landscape.</li><li>Superb process facilitation, project management, and analytical skills with the ability to manage multiple tasks and deadlines simultaneously.</li><li>Excellent presentation, interpersonal, written and verbal communication skills.</li><li>Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.</li><li>Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA, etc.) are preferred.</li></ul>
This role requires working from a U.S. Bank location three (3) or more days per week.</div>
If there&rsquo;s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members&rsquo; whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:<ul><li>
Healthcare (medical, dental, vision)</li><li>
Basic term and optional term life insurance</li><li>
Short-term and long-term disability</li><li>
Pregnancy disability and parental leave</li><li>
401(k) and employer-funded retirement plan</li><li>
Paid vacation (from two to five weeks depending on salary grade and tenure)</li><li>
Up to 11 paid holiday opportunities</li><li>
Adoption assistance</li><li>
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law</li></ul>
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00
U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.</div>

Operational Risk Review Manager - Technology

Hill International

<div>In this role, you will lead and oversee all aspects of project planning and delivery from pre-construction through to completion, with a strong focus on contract management, procurement, tendering, estimating, and cost control. You will work closely with clients, consultants, and contractors to manage project risks, facilitate regular coordination meetings, and ensure effective decision-making across all project phases. The position also involves preparing and implementing risk management plans, handling costs, claims, and change orders, and resolving conflicts to safeguard project outcomes. You will be responsible for ensuring projects are delivered on time, within budget, and to the required quality standards, while maintaining compliance with company policies and health, safety, and environmental requirements.</div>
 <div><ul><li>Has a strong background in pre-construction management including contract management, procurement, tendering, estimating, and cost. Should have good working knowledge of schedule management, sequence of activities from pre-design to design development to construction and closeout.
</li><li>Manage and oversee all aspects of project planning, development and implementation for a range of projects. Facilitate meetings with clients, consultants, and contractors to identify, assess, and evaluate risk issues arising from different phases in the project lifecycle.
</li><li>Prepare and implement a risk management plan for construction projects outlining the processes to mitigate risks. These plans should include risk identification procedures, risk evaluation procedures, and risk mitigation procedures.
</li><li>Frequently facilitate meetings with clients, consultants, and other management teams.
</li><li>Predicting potential financial liability for the Division from data provided by collieries, relevant authorities and the Division itself.
</li><li>Handling costs, claims associated with cost and time, change order management, and conflict resolution.
</li><li>Ensure project outcomes are achieved on time, on budget, to quality standards and within agreed scope in line with established agency project management methodology.
</li><li>Informs themselves of the relevant Quality, Environmental, Safety and Occupational Health Policies, Manuals and Procedures in place within Hill International, and ensures continued compliance with these requirements while employed by Hill.
</li><li>Perform other duties as assigned by the line manager/supervisor.</li></ul></div>
 <div><ul><li>Bachelor in engineering / management from an accredited university.
</li><li>Minimum 15 years&rsquo; experience in engineering and/ or project management including having worked as the risk manager on large-scale projects.
</li><li>Experience and demonstrated skills in identifying problems, assessing alternatives and determining solutions.
</li><li>The reliability and initiative to deliver success without immediate supervision.
</li><li>Proven experience and understanding of commercial risk management practice and procedures, preferably within the relevant cluster context.
</li><li>Proven experience of risk quantification (cost / schedule / quality / safety).
</li><li>Proven experience of maintaining risk management databases (e.g. ARM).
</li><li>Proven experience of corporate risk management procedures.
</li><li>Experience of working internationally (preference KSA experience).</li></ul></div>
 <div><div>Hill International, with more than 4,300+ professionals in over 100 offices worldwide, provides program management, project management, construction management, project management oversight, advisory, facilities management, and other consulting services to clients in a variety of market sectors. Engineering News-Record magazine recently ranked Hill as one of the largest program management firms in the world. For more information on Hill, please visit our website at www.hillintl.com . 
</div><div></div> 
<div>Hill is exclusively a program, project, and construction management provider, meaning we have one focus as a company: protecting client interests. Free of any potential conflicts, our entire business is geared towards helping clients achieve their desired outcomes. We are dedicated to exceeding expectations throughout the entire construction project lifecycle and adapt to the needs of each assignment to develop tailored approaches and solutions to meet those needs. 
</div><div></div> 
<div>Hill is a GISI Consulting Group company, part of the Global Infrastructure Solutions, Inc. (GISI) family of companies. Learn more about GISI Consulting Group at www.gisiconsulting.com . 
</div><div></div> 
Hill International is an Equal Opportunity Employer/Veteran/Disabled
 
 
Note : This job description is intended to provide an indication of the nature and levels of work, knowledge, skills, abilities and other essential functions to be carried out as part of fulfilling the role mentioned in the job title. Various other duties as required.</div>

Senior Projects Risk Engineer - (Saudization)

True Anomaly

<div><div>Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors &mdash; enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES
<ul>
<li>Be the offset. We create asymmetric advantages with creativity and ingenuity.</li>
<li>What would it take? We challenge assumptions to deliver ambitious results.</li>
<li>It&rsquo;s the people. Our team is our competitive advantage and we are better together.</li>
</ul></div><div>
Your Mission

We are seeking a driven and detail-oriented Enterprise Risk Analyst to support two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor Risk Management (TPVRM). Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role in executing risk assessments, maintaining program documentation, tracking remediation activities, and building the data foundation that powers executive-level risk decision-making.

This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense SaaS environment. You will work closely with engineering, security, legal, compliance, and operations teams to help identify, document, and track risk across the enterprise and its third-party supply chain. 


Responsibilities: 


Enterprise Risk Management
<ul>
<li>Support the design, execution, and continuous improvement of the enterprise risk management program under the direction of the Senior Enterprise Risk Manager.</li>
</ul><ul><li>Assist in conducting structured risk assessments using OCTAVE or similar threat-and-asset-centric methodologies, documenting findings, threat profiles, and recommended mitigations.</li>
</ul><ul><li>Support the application of FAIR methodology to help quantify risks in financial terms and contribute to risk prioritization analyses for leadership.</li>
</ul><ul><li>Maintain and update the enterprise risk register, ensuring accuracy of risk ratings, ownership assignments, remediation status, and residual risk tracking.</li>
</ul><ul><li>Build and maintain program dashboards, KPI/KRI reports, and status tracking using tools such as Jira, Confluence, enterprise GRC platforms, and MS Project.</li>
</ul><ul><li>Assist with audit readiness activities including evidence collection, pre-assessment preparation, control documentation, and post-audit remediation tracking.</li>
</ul><ul><li>Support POA&amp;M management for IL5 and IL6 environments, tracking open items to closure and escalating blockers to the Enterprise Risk Manager.</li>
</ul><ul><li>Contribute to the development and maintenance of risk policies, standards, and guidelines aligned to NIST SP 800-53 Rev. 5, NIST SP 800-171, RMF, and CMMC Level 3.</li>
</ul><ul><li>Coordinate and track internal audit schedules, findings, and corrective action plans across business units.</li>
</ul>
Third-Party Vendor Risk Management
<ul>
<li>Execute vendor risk assessments as part of the onboarding and periodic review lifecycle, including security questionnaire administration, documentation review, and risk scoring.</li>
</ul><ul><li>Maintain the vendor risk inventory and lifecycle tracking records, ensuring all vendors are appropriately tiered and assessed on schedule.</li>
</ul><ul><li>Monitor vendor risk signals including cybersecurity advisories, regulatory actions, and contractual compliance status, escalating material changes to the Enterprise Risk Manager.</li>
</ul><ul><li>Support contract and procurement teams by providing vendor risk assessment findings and recommended risk mitigation language.</li>
</ul><ul><li>Assist in ensuring TPVRM program alignment with CMMC supply chain requirements, DFARS clauses, and ITAR/export control considerations for critical suppliers.</li>
</ul><ul><li>Develop and maintain vendor risk reporting inputs and dashboard content to support executive-level visibility into third-party risk exposure.</li>
</ul>
Cross-Functional Collaboration
<ul>
<li>Serve as a reliable day-to-day point of contact for risk-related inquiries from internal stakeholders across engineering, security, operations, and legal teams.</li>
</ul><ul><li>Track program milestones, action items, and deliverables, proactively communicating status and flagging risks or dependencies to the Enterprise Risk Manager.</li>
</ul><ul><li>Continuously improve risk program workflows, documentation templates, and reporting processes to support scalable and repeatable execution.</li>
</ul><ul><li>Support the preparation of materials for internal leadership briefings, external assessor interactions, and government partner reviews.</li></ul> 


Qualifications
<ul>
<li>5+ years of experience in enterprise risk management, GRC, cybersecurity risk, compliance, or a closely related discipline.</li>
</ul><ul><li>Working knowledge of NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more of these frameworks.</li>
</ul><ul><li>Familiarity with risk assessment methodologies including FAIR and/or OCTAVE, with a desire to deepen applied expertise in risk quantification.</li>
</ul><ul><li>Experience supporting or executing third-party/vendor risk assessments, including questionnaire administration, documentation review, and risk tracking.</li>
</ul><ul><li>Hands-on experience with program management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC platforms, and MS Visio or Lucidchart.</li>
</ul><ul><li>Strong written and verbal communication skills, with the ability to clearly document findings and translate risk concepts for both technical and non-technical audiences.</li>
</ul><ul><li>Highly organized, self-directed, and comfortable managing multiple workstreams simultaneously in a fast-paced, regulated environment.</li>
</ul><ul><li>Active or ability to obtain SECRET, TS/SCI security clearance.</li>
</ul><ul><li>Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)).</li></ul> 


Preferred Qualifications
<ul>
<li>Background in startup, aerospace, defense technology, or SaaS companies operating in regulated government markets.</li>
</ul><ul><li>Industry certifications such as:</li>
</ul><ul><li>Certified in Risk and Information Systems Control (CRISC)</li>
</ul><ul><li>Certified Information Systems Auditor (CISA)</li>
</ul><ul><li>Open FAIR Certification (The Open Group)</li>
</ul><ul><li>CompTIA Security+ or equivalent</li>
</ul><ul><li>Certified ScrumMaster (CSM) or similar Agile certification</li>
</ul><ul><li>Experience with cloud environments, particularly Azure Government and/or AWS GovCloud.</li>
</ul><ul><li>Familiarity with POA&amp;M management, SSP documentation, and audit evidence collection in DoD authorization contexts.</li>
</ul><ul><li>Working knowledge of ITAR, EAR, DFARS, and export control considerations as they relate to vendor and supply chain risk.</li>
</ul><ul><li>Familiarity with Agile/Scrum and hybrid project delivery models.</li></ul> 


Compensation
<ul>
<li>Base Salary: Denver - $115,000 to $155,000, Long Beach - $120,000 to $165,000, Washington, DC - $120,000 to $165,000</li>
</ul><ul><li>Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave</li>
</ul>
Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 


Additional Requirements
<ul>
<li>Work Location: This role will be onsite at one of our office locations: Centennial, CO, Long Beach, CA, or Washington, DC #LI-Onsite</li>
</ul><ul><li>Work Environment: Standard office setting, working at a desk or in a production factory environment</li>
</ul><ul><li>Physical Demands: May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs.</li></ul> 


This position will be open until it is successfully filled.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.</div><div> 
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.</div></div>

Enterprise Risk Analyst

Paramount Assure

<div></div><div><div>We are seeking a highly skilled GRC Consultant &amp; Project Manager with a strong background in Governance, Risk, and Compliance (GRC) and Project Management. The ideal candidate will have experience designing and implementing GRC frameworks, managing enterprise risk, ensuring compliance with local regulations, and leading strategic projects. Arabic proficiency is a must.</div><div></div><div> 
Key Responsibilities:</div><div></div><div> 
1. Governance:</div><ul><li>
Develop and implement GRC frameworks aligned with industry best practices.</li><li>
Provide strategic advisory and reporting to the Board and executive management on GRC matters.</li></ul><div></div><div> 
2. Risk Management:</div><ul><li>
Oversee the Enterprise Risk Management (ERM) program and ensure risk mitigation strategies are in place.</li><li>
Conduct risk assessments, control evaluations, and fraud risk monitoring.</li><li>
Design and monitor Key Risk Indicators (KRIs) for proactive risk management.</li><li>
Oversee the vendor risk management program to mitigate third-party risks.</li></ul><div></div><div> 
3. Compliance:</div><ul><li>
Oversee regulatory change management and ensure compliance with local and international regulations.</li><li>
Design and implement compliance testing and monitoring programs.</li></ul><div></div><div> 
4. Program &amp; Project Management:</div><ul><li>
Lead the implementation of GRC technology platforms and automation solutions.</li><li>
Develop and execute training &amp; awareness programs for key stakeholders.</li><li>
Manage multiple projects ensuring timely delivery and stakeholder engagement.</li></ul><div></div><div> 
Must-Have:</div><div></div><ul><li> 
3+ years of experience in GRC, Risk Management, and Compliance.</li><li>Strong knowledge of local regulations and international GRC frameworks.</li><li>Experience in GRC consulting and project management.</li><li>Proven leadership and stakeholder management skills.</li><li>Professional certifications such as CAMS, CISA, CRISC, or equivalent.</li></ul><div>
-Arabic-speaking proficiency (mandatory).</div></div><div></div>

GRC Consultant & Project Manager

Search 10000+ Manager risk management jobs near you this May. New roles added regularly across leading industries. Apply today.