risk manager

Tridy Consultancy & Training Services

Risk ManagerRole Summary:Develop, implement, and maintain a comprehensive IT governance framework that aligns with industry best practices and regulatory requirements (e.g., COBIT, ITIL). Define clear roles, responsibilities, and accountabilities for IT governance within the organization. Establish and maintain IT policies, standards, and procedures to govern the use, management, and security of IT resources. Develop and implement processes for IT risk management and mitigation. Monitor compliance with established IT policies, standards, and procedures. Develop IT governance reporting system for transparency and insights into the effectiveness and efficiency of the NPC IT infrastructure, processes, and controls. Conduct periodic IT governance audits and assessments to identify areas for improvement. Report on the effectiveness of the IT governance framework to senior management. Provide training and awareness programs on IT governance best practices to employees. Participate in advising and coaching of the NPC team on best practices, technologies, and processes related to the scope of work.Qualifications and Skills<ul><li>Bachelor&rsquo;s degree in computer science, Information Technology, or a related field (Master's degree preferred).</li><li>10+ years of experience in IT management and governance roles.</li><li>In-depth understanding of IT governance frameworks, principles, and best practices.</li><li>Strong knowledge of risk management methodologies and frameworks.</li><li>Familiarity with relevant IT security standards and regulations like NIA, QCSF.</li><li>Excellent communication, collaboration, and problem-solving skills.</li><li>Strong analytical and critical thinking skills.</li><li>Excellent communication and interpersonal skills</li></ul>Job Types: Full-time, Permanent

Risk Manager

Hamad International Airport

<div>
 
 
 
 About the role:
 
 
 
 
 Hamad International Airport is seeking a highly skilled
 
 Enterprise Risk Manager
 
 to lead the development, implementation, and maintenance of comprehensive enterprise risk management framework. The successful candidate will play a key role in ensuring that all business risk is identified, assessed, and mitigated in line with the organization's objectives and regulatory requirements. If you thrive in a dynamic environment, possess excellent communication skills, and have a proven track record and can help us to achieve this ambition by:
 
 
 
 
 <ul>
 <li>
 Develop and implementing and maintaining a robust risk management framework that aligns with ISO 31000:2018 standards, industry best practices and the Group ERM framework.
 </li>
 <li>
 Provide support and drive the risk identification, treatment, and action plans and work closely with and support the Risk Champions to facilitate and manage the implantation of ERM to mitigate Strategic, Operational, Compliance and Financial risk.
 </li>
 <li>
 Validate information used in the risk register with Risk Champions to ensure that controls and treatment initiatives are appropriate to treat the risk.
 </li>
 <li>
 Prepare and present regular risk reports to senior leadership, operations teams and risk committees providing actionable insights into key risks and mitigation progress.
 </li>
 <li>
 Implement audit program, and plan and execute internal audits of ERM framework to ensure compliance with ISO 31000:2018, and aviation regulations.
 </li>
 </ul>
 
 
 About you:
 
 
 <ul>
 <li>
 Bachelor's Degree or Equivalent with Minimum of 6 years of job-related experience
 </li>
 <li>
 Proven experience with ISO 31000:2018 and ERM frameworks.
 </li>
 <li>
 Proven experience with ISO 31000:2018 and COSO ERM frameworks.
 </li>
 <li>
 Strong risk management and analytical capabilities along with the ability to translate data analysis into actions and results for Senior Management.
 </li>
 <li>
 Excellent communication and presentation skills and proven ability to effectively interact with team members, Business Units, and peers, earning their trust and establishing credibility, command of English Language.
 </li>
 <li>
 Project Management skills; able to work on critical multiple projects with competing priorities.
 </li>
 </ul>
 
 
</div>

Enterprise Risk Management Manager

CRCC - China Railway Construction Corporation Limited - Qatar Branch

China Railway Construction Corporation Limited - Saudi Arabia Branch is pleased to invite you to a WALK-IN INTERVIEW for the following positions:<ul><li>RISK MANAGER</li></ul>We would like to meet with you personally to discuss how you could contribute to our team.The details for the interview are as follows:<ul><li>Date: Friday, December 19, 2025</li><li>Time: 10:00 AM to 4:00 PM, on a first-come, first-served basis</li><li>Location: CRCC Qatar Branch, Manarat Lusail Tower, 17th Floor, Lusail Marina, Qatar</li><li>Email Addresses: crccsa-recruitment@crcc.sa | jobs@crcc.sa</li><li>WhatsApp Number: +974 60007013</li></ul>Please bring the following documents with you:<ul><li>Most updated and comprehensive copy of your CV</li><li>Authenticated Degree with Transcript of Records</li><li>Professional Accreditations, Certificates, Trainings</li></ul>No prior appointment is required, but if you are unable to attend on the scheduled date, kindly inform us in advance.We look forward to meeting you.Job Types: Full-time, Permanent, Contract Contract length: 24 monthsApplication Question(s):<ul><li>How much are your expected salary in the full package?</li><li>The project location is in Jeddah, KSA. Are you willing to be relocated?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>FIFA Stadium: 10 years (Preferred)</li><li>Tower, High Rise, Airport, Commercial Building Projects: 10 years (Preferred)</li></ul>License/Certification:<ul><li>Civil Engineer (Preferred)</li><li>Architect (Preferred)</li></ul>

RISK MANAGER STADIUM PROJECT in KSA | Walk-In Recruitment INVITATION in Doha, Qatar | 19 December

ITALCONSULT

Ability to review and assess Contractor&rsquo;s baseline master programmes and detailed submissions/revisions, including zoning, WBS structure, contractual compliance, BoQ analysis, scope compliance, sequencing, critical path analysis, cost loading and distribution, production rates, duration analysis, resource loading, activity coding, schedule log, etc.- Has a solid knowledge in scheduling options and techniques to address critical tasks, including longest path analysis, backdated updates, eliminating out-of-sequence activities, and rectifying scheduling defects.- Fully familiar with the construction requirements including engineering submissions, engaged authorities in infrastructure projects, pre-requisite works, teaming sequence and needs, required crews to complete any infrastructure task and their expected productivity, testing and commissioning as well as handing over requirements.- Demonstrate a sound knowledge in project control and verifying the Contractor&rsquo;s updates utilizing project management tools; like performance measurement sheets, earned value reports, variance reports, etc.- Ability to perform productivity analysis, longest path analysis, multiple critical path analysis, identifying the root cause of delays, and other analyses might be requested.- Has a sound knowledge in evaluating Extension of Time techniques, recommendation report&rsquo;s structure, delay analysis methods, preparing and tracking detailed chronologies and preparing recommendations in accordance with national/international standards.- Ability to perform concurrency analysis, identify Contractor&rsquo;s concurrent delays, track records, perform window analysis, and prepare recommendations accordingly.Civil Engineering Knowledge:- Demonstrate a sound knowledge of Treated Sewage Effluent and landscaping infrastructure including but not limited to, different types of flow, the use of chambers (conventional, butterfly, air release, washout, distribution, flow meter), pressure compensating elements, sprinklers, valves, fitting and other ancillaries, as well as different types of Hard and Soft landscape construction elements.- Knowledgeable in other utilities and roadway infrastructure, including but not limited to drainage (pipes, manholes, flow chambers, gullies, connections, ancillaries, flow systems, dewatering techniques, the use of granular materials), Electricity, Street lighting, Telecommunication, different types of pavements (flexible, rigid, semi rigid, overlays), street and safety furniture, including all testing requirements, and handing over to the Authorities.Contract Administration:- Sound knowledge of FIDIC forms of contract, different procurement routes, and contract types.- Literate in the Society of Construction Law protocol and ability to assess Contractor&rsquo;s claims in accordance with the stipulated principles involved.- Ability to interpret contract terms correctly, understand bespoke forms, identify roles, responsibilities, obligations, and risks of different contracting parties, breaches (material, non-material, repudiatory), default events, preliminary requirements, bonds, insurances, submission/approval timelines, and dispute resolution mechanisms.- Ability to identify contractual standings and merits for Contractor&rsquo;s claims, and draft contractual letters for Contractor/Employer, following proper contractual mechanisms and performing the roles and obligations of a supervision consultant.Commercial Knowledge / Skills:- Ability to perform Bill of Quantity analysis, identify the required materials to be loaded in the Contractor&rsquo;s schedule of work, and assess the cost loading of different activities/cost headings.- Ability to analyze Contractor&rsquo;s cash-in flow, forecasting the specific task and the associated cost, and ensuring consistency between the pricing documents and the programme of work.- Ability to Perform gap analysis for Earned Value / Actual Value of work completed, and demonstrate sound knowledge in identifying variances, and preparing recommendations.- Ability to perform detailed take-off for different disciplines.- Ability to perform Value-to-Complete report, identifying the value of work completed and providing category/bill wise breakdown of remaining works in different intervals.Risk Management Knowledge / Skills:- Ability to identify Risks for different disciplines, in accordance with the schedule of work and site conditions.- Ability to develop a comprehensive Risk Register including Risk definition, parameters, scores and Risk response plans.- Drafting Risk alerts for critical and high proximity potentials.Software Skills:- Project Management Software: Primavera P6 Professional, Oracle Primavera, Active Risk Manager.- Construction Software: AutoCAD Civil 3D, or Conventional AutoCAD.- Microsoft Office: Word, Excel, PowerPoint, Power BI.- Other software: Spreadsheet proficiency (Excel, Google Sheets), Submittal and RFI tracking SoftwareJob Type: PermanentEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Planning Engineer : 10 years (Preferred)</li></ul>License/Certification:<ul><li>MMUP (Preferred)</li></ul>

Planning Engineer

Hamad Bin Khalifa University

<div>
 
 Job Title (In Arabic)
 
 
 
 Entity: Other
 
 
 
 Entity (Other) (In English):
 
 President Office
 
 
 
 Entity (Other) (In Arabic):
 
 مكتب الرئيس
 
 
 
 Department/Center (Optional) (In English):
 
 Audit, Risk, and Compliance
 
 
 
 About HBKU
 
 
 
 
 Department/Center (Optional) (In Arabic):
 
 
 
 Hamad Bin Khalifa University (HBKU), a member of Qatar Foundation for Education, Science, and Community Development (QF), was founded in 2010 to continue fulfilling QF&rsquo;s vision of unlocking human potential. HBKU is a homegrown research and graduate studies University that acts as a catalyst for positive transformation in Qatar and the region while having a global impact.
 
 
 
 About Entity:
 
 Description for frequently used entities can be found in the other attached doc to be used in Ad. If the entity is other than the one mentioned in the doc, please write the description below
 
 
 The Audit, Risk and Compliance portfolio provides leadership, consultation and support within HBKU for internal audit, risk, compliance, business continuity and crisis management.
 
 
 
 Position
 
 (Job Purpose)
 
 
 To manage the development, implementation and maintenance of an effective risk and compliance function employing both operational and technical knowledge of risk and compliance management systems in accordance with HBKU's overall strategic direction and vision.
 
 
 
 Job Description
 
 
 
 <ul>
 <li>
 Lead the Risk and Compliance Department including managing HBKU&rsquo;s compliance breach reporting program.
 </li>
 <li>
 Maintain HBKU&rsquo;s risk and compliance programs based on best practice, including the development and monitoring of policy, procedures and framework pertaining to risk and compliance management, implementation and maintenance of the risk and compliance frameworks across HBKU. This is to ensure the implementing strategies, programs, policies and procedures and solutions across HBKU to control risks, improve operational efficiencies and ensure compliance with the relevant standards and regulations.
 </li>
 <li>
 Manage risk monitoring, assessments and reporting (including breaches and incidents, key risk indicators, risk registers, compliance obligations. This includes conducting risk assessments, which will involve analysing risks as well as identifying emerging risks impacting HBKU.
 </li>
 <li>
 Provide subject matter expertise and specialist advice and education in relation to risk, and compliance. This includes keeping up-to-date with current trends and issues relating to risk and compliance management.
 </li>
 <li>
 Develop and provide comprehensive and accurate reports to the Director of Risk and Compliance, senior management and the Board and its standing committees (in particular the Audit Committee) as relevant to the risk and compliance management portfolio, which enable management and the Board to fulfil their risk and compliance obligations. Reports must be accurate and completed on time.
 </li>
 <li>
 Lead and manage the operations of the Risk and Compliance Department to ensure that all services and resources support HBKU&rsquo;s objectives and targets. This includes ensuring delivery of operational systems and resources to support the risk, compliance and business continuity programs across HBKU including responsibility for software functionality.
 </li>
 <li>
 Increase awareness and knowledge of risk and compliance management in HBKU through creating awareness, training and communications.
 </li>
 <li>
 Lead and manage the implantation of the integrity framework including managing the investigation process as required for whistleblower and fraud and corruption allegations.
 </li>
 <li>
 Any other duties as directed, commensurate with the scope and classification of the position.
 
 
 </li>
 </ul>
 
 Minimum Knowledge, Skills &amp; Experience (In Bullet Points Only)
 
 
 
 <ul>
 <li>
 Bachelor's degree in Risk Management, Compliance, Business Management or other relevant related field is
 </li>
 <li>
 Required.
 </li>
 <li>
 Minimum 8-10 years of Risk Management, Compliance, and/or Crisis Management experience.
 </li>
 <li>
 Working knowledge of the regulatory standards of the State of Qatar.
 </li>
 <li>
 Hands-on experience and thorough understanding of policies and best practices of Compliance, Budget preparation, presentation, control, and monitoring.
 </li>
 <li>
 Excellent interpersonal, negotiation, and presentation skills; training experience preferred.
 
 
 </li>
 </ul>
 
 Additional Requirements/Skills
 
 (In Bullet Points Only) |
 
 
 (Optional)
 
 
 
 
 <ul>
 <li>
 Excellent analytical, planning, and time management skills.
 </li>
 <li>
 Excellent writing skills with the ability to draft and edit a variety of written reports and communications and to articulate ideas clearly and concisely; Arabic proficiency is an advantage.
 </li>
 <li>
 Proficiency in MS Office applications.
 
 
 </li>
 </ul>
 
 How To Apply
 
 
 
 To apply, please follow this link: https://www.hbku.edu.qa/en/careers/risk-and-compliance-manager-hbku
 
 
 Additional documents may be solicited from short-listed candidates.
 
 
 
 Deadline:
 
 Check any one option from below &amp; replace the semester &amp; year where necessary. Write in the &ldquo;Other&rdquo; section if none of the options is selected.
 
 
 Applications are accepted immediately for review. The successful candidate must be ready within 3 months.
 
 
 
 Other
 
 
 
 
 Remuneration
 
 
 
 HBKU offers an attractive compensation package that includes a tax-free salary and additional benefits such as an accommodation allowance, annual paid leave, and medical insurance.
 
 
 Hamad Bin Khalifa University is an equal opportunity educator and employer. We are committed to maintaining culturally and academically diverse staff of the highest caliber.
</div>

Risk and Compliance Manager

Lesha Bank

<div>
 
 Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Information Security Officer (ISO).
 
 
 
 
 
 
 Role Purpose
 
 
 
 The Information Security Officer (ISO) will develop, implement, and oversee the bank&rsquo;s information security strategy, policies, and controls. The ISO ensures that the bank&rsquo;s data, systems, applications, and infrastructure are safeguarded against internal and external threats while complying with local regulatory requirements (QCB, QFCRA, NCSA-Q) and international standards (ISO 27001, NIST, GDPR, PCI-DSS).
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Governance &amp; Compliance
 
 
 <ul>
 <li>
 Establish, maintain, and enforce the bank&rsquo;s information security framework in alignment with QCB, QFCRA, and local cybersecurity regulations.
 </li>
 <li>
 Ensure compliance with international standards (ISO 27001, NIST CSF, COBIT, PCI-DSS) and conduct regular gap analyses.
 </li>
 <li>
 Prepare and present security risk assessments and reports to senior management, regulators, and the Board Risk Committee.
 </li>
 <li>
 Design, implement, and enforce security policies, procedures, and controls to safeguard the bank&rsquo;s infrastructure and data.
 </li>
 </ul>
 
 
 
 
 
 Security Operations
 
 
 <ul>
 <li>
 Oversee Security Operations Center (SOC) activities, incident response, and threat intelligence monitoring.
 </li>
 <li>
 Develop and maintain business continuity, disaster recovery, and incident response plans.
 </li>
 <li>
 Implement and monitor Data Loss Prevention (DLP), intrusion detection/prevention (IDS/IPS), endpoint protection, and other security tools.
 </li>
 <li>
 Lead investigations of security breaches, develop mitigation strategies, and ensure lessons learned are integrated into policies and processes.
 </li>
 <li>
 Conduct regular staff training on security awareness, best practices, and incident procedures.
 </li>
 <li>
 Collaborate with IT and business teams to continuously enhance security culture and controls.
 </li>
 </ul>
 
 
 
 
 
 Risk Management
 
 
 <ul>
 <li>
 Conduct enterprise-wide risk assessments for systems, applications, vendors, and third-party service providers.
 </li>
 <li>
 Identify vulnerabilities and ensure timely remediation through patch management and secure configurations.
 </li>
 <li>
 Partner with IT and business units to integrate security into new products and initiatives.
 </li>
 </ul>
 
 
 
 
 
 Vendor &amp; Technology Oversight
 
 
 <ul>
 <li>
 Evaluate and approve technology vendors, outsourcing partners, and cloud solutions for security compliance.
 </li>
 <li>
 Manage penetration tests, vulnerability assessments, and external audits.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field. Master&rsquo;s degree preferred.
 </li>
 <li>
 Professional certifications: CISSP or CISM required; CISA and ISO 27001 Lead Implementer preferred.
 </li>
 <li>
 Cloud security certifications (e.g., CCSP, AWS Security) are a plus.
 </li>
 <li>
 8&ndash;12 years in information security, with at least 5 years in the financial-services sector.
 </li>
 <li>
 Strong background in banking systems, digital channels, payment systems, and regulatory compliance.
 </li>
 <li>
 Proven experience engaging with regulators (QCB, QFCRA, CMA, or equivalent).
 </li>
 <li>
 Proven experience in implementing SIEM solutions and managing SOC teams.
 </li>
 <li>
 Expertise in cybersecurity frameworks, network security, cryptography, and identity &amp; access management.
 </li>
 <li>
 Strong risk management, analytical, and problem-solving skills.
 </li>
 <li>
 Excellent communication and stakeholder-management skills, capable of engaging effectively with regulators, auditors, and the Board.
 </li>
 <li>
 Ability to influence across departments, drive a culture of security, and lead change initiatives without direct authority.
 </li>
 </ul>
 
 
</div>

Information Security Officer (ISO)

BPO PLUS

<ul><li>Develop, implement, and maintain information security governance, risk, and compliance (GRC) frameworks</li><li>Conduct enterprise risk assessments, threat modeling, and control gap analyses</li><li>Define and monitor security policies, standards, procedures, and guidelines</li><li>Ensure compliance with regulatory and industry frameworks such as ISO 27001, NIST, PCI DSS, and local regulations</li><li>Support certification, audit preparation, and regulatory assessments</li><li>Map business and technical controls to compliance and governance requirements</li><li>Identify, assess, and track information security risks and remediation plans</li><li>Advise stakeholders on risk treatment options and security best practices</li><li>Coordinate internal and external audits and manage audit findings closure</li><li>Develop risk registers, compliance reports, and executive dashboards</li><li>Support third-party and vendor risk management assessments</li><li>Collaborate with IT, security, legal, and business teams to embed security governance</li><li>Provide awareness and guidance on security policies and compliance obligations</li><li>Monitor regulatory changes and assess their impact on the organization</li><li>Support continuous improvement of the organization&rsquo;s security posture</li></ul>Job Type: Full-timePay: QAR15,000.00 - QAR20,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>global cybersecurity standards : 1 year (Required)</li><li>ISO framework - ISO/IEC 27001 and ISO 22301 : 1 year (Required)</li></ul>

Security GRC Consultant

Explore 689+ Risk manager in Doha Qatar this January. Find roles across top companies and apply now to boost your career.