Risk & Compliance Expert

Job Overview

We are seeking a Risk & Compliance Expert to develop and implement a comprehensive enterprise risk management framework, ensuring adherence to internal policies and external regulations in Riyadh, Saudi Arabia.

Key Responsibilities

• Develop and design an enterprise-wide risk management framework, defining risk appetite and acceptable tolerance levels.
• Maintain and update a detailed risk register covering risk identification, probability analysis, impact measurement, and mitigation plans.
• Oversee compliance management across all organizational sectors, monitoring internal policies and external legal requirements and identifying compliance gaps.
• Create and enforce effective internal control mechanisms to prevent operational violations or errors and ensure these controls are implemented across processes.
• Prepare periodic risk reports for senior management and risk committees outlining current and emerging risks and progress on mitigation measures.
• Lead root cause analysis investigations following any compliance breaches or risk events, issuing recommendations to avoid recurrence.
• Promote a culture of compliance and risk awareness through workshops and continuous guidance, making compliance a shared responsibility.

Required Skills and Capabilities

• Strong analytical and predictive abilities for data analysis and risk forecasting to prevent potential crises.
• Proficient with global risk management standards such as ISO 31000 and internal control frameworks like COSO.
• High attention to detail and thoroughness to ensure no compliance gaps.
• Excellent communication and negotiation skills to persuade departments to adopt necessary control measures as enabling rather than restrictive.

Qualifications and Experience

• Bachelor's degree in Risk Management, Finance, Law, Accounting, or Business Administration.
• Minimum of 4 years of practical experience in risk and compliance management, preferably in complex regulatory environments like government entities, banks, or major consulting firms.
• Professional certifications highly preferred, such as CRISC (Certified in Risk and Information Systems Control) and CRM (Certified Risk Manager).