Risk and Compliance Officer

Company Overview

Job Purpose

Enterprise Risk Management

• Develop, implement, and maintain the organization's Enterprise Risk Management (ERM) framework.
• Establish and maintain an enterprise-wide risk register, ensuring risks are identified, assessed, documented, monitored, and regularly reviewed. This will involve working with department level risk holders to populate the enterprise-wide risks.
• Conduct risk assessments across clinical, operational, financial, strategic, regulatory, information security, and reputational domains.
• Work with department level risk holders to create a reporting structure and then provide regular updates to senior leadership on the organization's risks.
• Facilitate risk workshops and collaborate with departmental leaders to identify emerging risks and define mitigation strategies.
• Monitor risk indicators and prepare risk reports and dashboards for leadership and governance committees.
• Track mitigation actions and ensure timely resolution of identified risks.
• Support business continuity planning and crisis management activities.

Regulatory Compliance

• Ensure organizational compliance with applicable UAE laws, Department of Health (DOH) regulations, healthcare standards, and other relevant regulatory requirements
• Monitor changes in legislation and regulatory requirements and recommend actions to maintain compliance.
• Conduct compliance assessments and gap analyses to identify areas requiring corrective action.
• Support organizational readiness for inspections, audits, and accreditation reviews.
• Maintain regulatory registers and ensure organizational policies remain current and compliant.
• Work with compliance owners for the various departments to create a reporting structure and then provide regular updates to senior leadership on the organization's compliance with its policies and other legal and regulatory obligations.

Policy Development And Governance

• Develop, review, and update organizational policies, procedures, and governance frameworks.
• Establish processes to ensure effective implementation and communication of policies across the organization and organizational and employee adherence to IHLAD's policies.
• Promote consistency and adherence to corporate governance principles and internal controls.
• Support the implementation of governance initiatives and organizational committees.

Monitoring, Auditing and Internal Controls

• Develop and implement compliance monitoring and auditing programmes.
• Conduct periodic compliance reviews and risk-based audits across departments.
• Evaluate the effectiveness of internal controls and recommend improvements.
• Monitor corrective and preventive action plans and ensure appropriate closure of findings.
• Prepare reports and presentations for leadership and governance committees.

Investigations And Incident Management

• Support investigations relating to compliance breaches, policy violations, incidents, and risk events.
• Conduct root cause analyses and recommend corrective actions and control improvements.
• Maintain records of compliance investigations and risk incidents.
• Escalate significant compliance concerns and risk issues to leadership as appropriate.