Senior Manager - Enterprise Risk

About Core42

Core42 stands at the forefront of AI-driven cloud and digital infrastructure innovation, offering transformative technological solutions worldwide. Specializing in sovereign AI infrastructure, Core42 partners with clients in sectors subject to rigorous regulatory standards, delivering scalable and high-performance computing capabilities. Based in the Middle East, Core42 merges sovereignty with cutting-edge tech to lead advancements in AI and digital transformation.

Role Overview

The Senior Manager of Enterprise Risk will spearhead the continuous refinement and implementation of Core42's Enterprise Risk Management (ERM) program. Reporting directly to the Senior Director of Governance, Risk & Compliance, this role oversees comprehensive enterprise risks aligned with the company's objectives, governance frameworks, and risk appetite. Acting as a strategic consultant to top management, this position drives a forward-thinking risk culture and oversees risk evaluation across critical business and technology domains, including cloud infrastructure, data centers, cybersecurity, and emerging AI technologies.

Key Duties

• Design and advance the ERM governance structure, policies, procedures, and methodologies tailored to Core42's environment.
• Collaborate with senior leadership to establish, review, and uphold the organization's risk appetite and tolerance frameworks.
• Lead enterprise-wide identification, assessment, prioritization, and monitoring of risks spanning strategic, operational, financial, compliance, and technological categories.
• Keep detailed risk registers current, ensuring accountability for risk ownership, control measures, mitigation actions, and remediation efforts.
• Create and execute risk mitigation plans aligned with business goals and regulatory mandates.
• Evaluate and oversee risks across IT operations, cloud platforms, data centers, cybersecurity efforts, business continuity, and strategic projects.
• Partner closely with Cybersecurity, Engineering, Operations, and Technology teams to assess and integrate technical risk findings into broader risk management.
• Manage operational risks including vendor and third-party assessments, process risk reviews, and control effectiveness analyses.
• Prepare comprehensive, executive-level risk reports, dashboards, and heatmaps for report-outs to leadership and governance bodies.
• Act as the management liaison for ISO 31000 compliance, ensuring ERM alignment with relevant frameworks.
• Guarantee adherence to risk standards such as ISO 31000, COSO ERM, ISO 27001, and others, as well as contractual and regulatory obligations.
• Promote enterprise-wide risk awareness through training programs and workshops that elevate accountability.
• Leverage Governance, Risk & Compliance (GRC) tools to automate processes, enhance reporting accuracy, and streamline risk workflows.
• Optimize procedures for managing risk acceptance, policy exceptions, audit outcomes, compliance mandates, and remediation tracking.
• Support initiatives related to audit readiness, budgeting for risk treatment, and ongoing improvement of risk practices.
• Assess risks related to AI, Machine Learning, Generative AI, Large Language Models, with a focus on responsible AI governance.
• Evaluate cloud-native service risks and governance controls ensuring compliance with risk appetite and industry best practices.
• Develop metrics, key risk indicators (KRIs), and maturity models to measure ERM effectiveness and guide continuous enhancement.

Qualifications and Experience

• Bachelor’s degree in IT, Risk Management, Finance, Accounting, Business Administration, or related fields; Master’s degree preferred.
• At least 8 years in enterprise, operational, information security, technology, or cloud risk governance.
• Demonstrated experience designing and managing ERM frameworks in complex, dynamic organizations.
• Deep knowledge of risk management methodologies, governance, and risk evaluation techniques.
• Proficiency in technical risk assessments across IT, cloud, data centers, cybersecurity, and AI systems.
• Familiarity with standards such as NIST, ISO 31000, COSO ERM, ISO 27001, SOC 2.
• Experience with cloud environments including Microsoft Azure, AWS, and hybrid models.
• Working knowledge of GRC platforms like ServiceNow GRC or RSA Archer.
• Strong analytical, decision-making, communication, and leadership skills, capable of translating risks into actionable strategies.
• Effective collaboration with cross-functional teams including Risk, Security, Engineering, Operations, Legal, Audit, and Compliance.

Preferred Credentials

• Certifications such as CRISC, CIRM, CDPSE, ISO 31000 Risk Manager, ISO 27001 Lead Implementer, NIST RMF, or COSO ERM.
• Experience in AI, cloud computing, telecommunications, cybersecurity, or regulated industries.
• Knowledge of AI governance standards including ISO/IEC 42001, NIST AI RMF, EU AI Act, and emerging regulations.
• Skills in risk dashboard creation, KRI development, board-level reporting, and risk maturity evaluations.
• Understanding of DevSecOps, cloud-native architectures, cybersecurity governance, and tech transformation programs.
• Expertise in third-party risk, operational resilience, and business continuity management.
• Proven ability to foster change, influence stakeholders, and embed robust risk cultures within varied environments.

Working at Core42

Join a culturally diverse organization of over 1,100 employees from 68 countries, fostering innovation and inclusiveness. Our values of Grit, Passion, and Impact drive a collaborative culture committed to exceptional outcomes.

Benefits

• Competitive salary commensurate with expertise.
• Annual performance bonuses rewarding your contributions.
• Access to Esaad and Fazaa cards offering wide-ranging discounts.
• Comprehensive family health coverage including dental, vision, and life insurance.
• Opportunities for continuous learning through premier platforms and unlimited course access.