Risk and Change Governance Manager

Position Overview

Risk Management

• Develop, implement, and maintain comprehensive enterprise risk management (ERM) frameworks aligned with ISO 31000 and industry best practices
• Identify, assess, and evaluate strategic, operational, financial, and reputational risks across projects and business operations
• Establish risk assessment methodologies, risk registers, and risk rating criteria
• Facilitate risk workshops and assessments with project teams and senior management
• Monitor and report on key risk indicators (KRIs) and risk exposure levels
• Develop risk mitigation strategies, contingency plans, and risk response actions
• Coordinate risk management activities across multiple projects and departments

Governance Framework

• Design and implement governance structures, policies, and procedures to ensure organizational compliance and accountability
• Establish governance committees, terms of reference, and decision-making frameworks
• Ensure adherence to corporate governance standards, regulatory requirements, and industry regulations
• Develop and maintain governance documentation including charters, policies, and standard operating procedures
• Monitor governance compliance and conduct periodic governance audits and assessments
• Advise senior management on governance best practices and improvement opportunities

Change Management and Control

• Establish and maintain change control processes and change management frameworks
• Review, assess, and approve change requests in accordance with established protocols
• Evaluate the impact of proposed changes on scope, schedule, cost, quality, and risk
• Facilitate Change Control Board (CCB) meetings and document decisions
• Ensure proper documentation, tracking, and reporting of all changes
• Monitor change implementation and verify closure of approved changes
• Analyze trends in change requests to identify systemic issues
• Compliance and Assurance
• Ensure compliance with Saudi Arabian regulatory requirements, international standards, and contractual obligations
• Coordinate internal and external audits related to risk and governance
• Implement corrective and preventive actions to address compliance gaps
• Maintain compliance registers and track regulatory obligations
• Liaise with regulatory authorities, auditors, and compliance teams
• Reporting and Analysis
• Prepare comprehensive risk reports, governance dashboards, and change management reports for executive leadership
• Present risk profiles, heat maps, and trend analysis to stakeholders
• Develop KPIs and metrics to measure effectiveness of risk and governance programs
• Provide regular updates on risk exposure, governance compliance, and change status
• Generate ad-hoc reports and analysis as required by management

Stakeholder Engagement

• Collaborate with project managers, department heads, and senior leadership on risk and governance matters
• Facilitate communication between stakeholders on risk, governance, and change issues
• Conduct training and awareness sessions on risk management, governance, and change control
• Build risk and governance culture across the organization
• Interface with clients, partners, and external stakeholders on governance requirements

Strategic Advisory

• Provide strategic advice to leadership on risk appetite, tolerance levels, and governance structures
• Support strategic decision-making through risk-informed analysis and recommendations
• Identify opportunities for process improvement and operational efficiency
• Contribute to business planning and strategy development from risk and governance perspectives

Education

• Bachelor's degree in Business Administration, Risk Management, Finance, Engineering, or related field
• Professional certifications such as PMI-RMP (Risk Management Professional), CRM (Certified Risk Manager), or ISO 31000 Risk Management certification preferred

Experience

• Minimum 8-10 years of progressive experience in risk management, governance, and change control
• At least 3-5 years in a managerial or leadership role
• Proven experience in developing and implementing risk and governance frameworks
• Experience in the Saudi Arabian market or Middle East region preferred
• Background in construction, real estate, infrastructure, or consulting industries is advantageous

Technical Knowledge

• Deep understanding of enterprise risk management principles and methodologies
• Strong knowledge of governance frameworks (COSO, ISO standards, COBIT)
• Expertise in change management processes and change control procedures
• Familiarity with Saudi Arabian regulatory environment and compliance requirements
• Understanding of project management principles and contract administration
• Knowledge of business continuity and crisis management practices

Skills And Competencies

• Excellent analytical and critical thinking skills
• Strong problem-solving abilities with attention to detail
• Outstanding written and verbal communication skills in English (Arabic proficiency is highly desirable)
• Advanced proficiency in MS Office Suite (Excel, PowerPoint, Word)
• Experience with risk management software and governance tools
• Ability to influence and engage stakeholders at all organizational levels
• Strong presentation and facilitation skills

Preferred Qualifications

• Bachelor's degree in Risk Management, Business Administration, or related field
• Additional certifications: PMP, Prince2, CGEIT, CIA, or similar
• Experience with mega-projects or large-scale developments in Saudi Arabia
• Knowledge of Vision 2030 initiatives and Saudi regulatory landscape
• Familiarity with digital transformation and technology risk management
• Experience with GRC (Governance, Risk, and Compliance) platforms

Key Competencies

• Strategic thinking and business acumen
• Leadership and team collaboration
• Integrity and ethical judgment
• Adaptability and resilience
• Results-driven with commitment to excellence
• Proactive and forward-thinking approach
• Strong stakeholder management capabilities
• Cultural awareness and sensitivity