{bc}
bayt

ERM/Operational Risk Specialist

Unknown
Riyadh, KSA
Director
Onsite
Discovered 4 days ago
Enterprise Risk ManagementOperational Risk ManagementRisk & Control Self-Assessments (RCSA)Risk RegistersRisk & Control Matrices (RCM)Key Risk Indicators (KRIs)

Full Job Posting

Role purpose

Implement and continuously operate the client’s Operational Risk Management Framework across business units.

Facilitate RCSAs, maintain the enterprise risk register, challenge assessments, monitor KRIs, coordinate reporting, and promote proactive risk management.

Operational risk and RCSAs

  • Operate risk procedures and the lifecycle from identification through monitoring, reporting, and periodic reassessment, aligned with risk appetite and the risk management framework.
  • Plan, facilitate, and document RCSA workshops; challenge inherent and residual risk assessments using approved methodologies.
  • Assess control design and effectiveness, apply likelihood and impact scoring consistently, finalize RCSA outputs, and obtain business-unit sign-off.

Risk register, KRIs, and reporting

  • Maintain the enterprise risk register, accurately recording and linking risks, controls, action plans, KRIs, and business process owners.
  • Monitor residual-risk changes, recommend reassessments, and track risk treatment actions to closure.
  • Develop KRIs and thresholds, monitor performance and deteriorating trends, recommend revisions, and produce periodic reports.
  • Prepare risk reporting for Executive Management, ExCom, GARC, and the Board; escalate significant risks and appetite breaches.

Events, advisory, and improvement

  • Monitor emerging risks and recurring themes; coordinate event reporting, investigate significant incidents with business units, and perform root cause analysis.
  • Incorporate lessons learned into RCSAs and control improvements; advise on treatments and risk implications of initiatives, organizational changes, outsourcing, and major projects.
  • Improve methodologies, templates, and reporting; support risk culture through awareness sessions and coaching and contribute to procedure reviews.

Experience and skills

  • Requires 5–8 years’ experience in operational risk, enterprise risk management, internal controls, internal audit, or governance.
  • Requires experience facilitating RCSA workshops, maintaining enterprise risk registers, designing and monitoring KRIs, and preparing Board and Committee risk reporting.
  • Requires experience applying ISO 31000 or COSO ERM frameworks.
  • Financial services, sovereign funds, private equity, or development finance experience is preferred.
  • Behavioral competencies include analytical judgment, structured facilitation, constructive challenge, stakeholder management, strong writing, attention to detail, independent thinking, organization, and execution.
  • Microsoft Excel and Power BI are preferred.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Unknown