Manager – Operational & Enterprise Risk Management, UAE

About the employer and team

Role overview

Responsibilities

• Lead end-to-end ORM and ERM engagements, including framework design, risk assessments, control testing, remediation, quality, budget, and timelines.
• Design integrated frameworks linking principal risks to operational taxonomies, process and control libraries, and risk registers.
• Identify strategic, financial, regulatory, technology, and emerging risks; develop risk appetite, tolerances, KRIs, thresholds, and escalation protocols.
• Lead safety culture assessments, HSE system reviews, leadership training, and coaching.
• Facilitate RCSAs, challenge risk ratings, test controls, identify gaps and root causes, and agree remediation plans.
• Strengthen risk governance, three-lines-of-defense accountabilities, committees, policies, incident management, and executive and board reporting.
• Deliver control assurance, thematic and deep-dive reviews, and independent assurance over major change and transformation programs.
• Present findings to clients, executives, and risk and audit committees; manage and coach junior staff and review their work.
• Build client relationships and contribute to proposals, pitches, new business, and thought leadership.

Qualifications and experience

• Bachelor's or master's degree in business administration, finance, accounting, risk management, engineering, or a related field.
• 5+ years of operational and enterprise risk experience in a first- or second-line role, internal audit, or consulting.
• Hands-on ownership of risk framework components, including taxonomy, registers, appetite, KRIs, and control libraries.
• Experience running RCSAs, testing controls, working with operational risk data and incidents, and conducting root-cause and scenario analysis.
• Experience developing risk appetite statements, principal and emerging risk assessments, and board-level reporting.
• Working knowledge of ISO 31000, ISO 17776, and operational resilience expectations; professional ERM or ISO 31000 certification held or in progress.
• Experience engaging risk and audit committees, regulators, and second- and third-line functions; willingness to travel as required.

Professional capabilities

• Strong communication skills for technical and non-technical audiences, analytical ability, and pragmatic problem-solving.
• Ability to maintain objectivity, challenge constructively, and work collaboratively in a fast-paced environment.
• Developing client management, business development, and negotiation skills are expected.

Advantageous experience

Workplace

• The posting describes the role as based in the Middle East region; travel is required as needed.

Development and benefits

• The employer describes performance development, training, on-the-job learning, and benefits and well-being resources.