Operational Risk Management (ORM) Manager

About the Role

Tamam is seeking an experienced Operational Risk Management (ORM) Manager to join its Risk team in Riyadh, Saudi Arabia. This full-time role involves developing, implementing, and maintaining the operational risk management framework across the organization. The ORM Manager will collaborate with business and support functions to identify, assess, monitor, and mitigate operational risks, ensuring compliance with regulatory requirements, internal policies, and the organization’s risk appetite.

Key Responsibilities

• Manage and continuously enhance the Operational Risk Management framework, policies, methodologies, and processes.
• Identify, assess, monitor, and report operational risks across business and support functions.
• Facilitate Risk and Control Self-Assessments (RCSA) with relevant departments.
• Develop and monitor Key Risk Indicators (KRIs) and operational risk metrics.
• Maintain and analyze the operational risk event and loss database.
• Conduct root cause analysis for operational incidents and ensure appropriate corrective actions are implemented.
• Monitor remediation plans and follow up on outstanding risk actions.
• Perform operational risk assessments for new products, systems, processes, and material changes.
• Support the development and monitoring of the organization’s operational risk appetite and tolerance levels.
• Prepare regular operational risk reports and dashboards for senior management and relevant committees.
• Identify emerging operational risks and recommend appropriate mitigation actions.
• Work closely with Technology, Cybersecurity, Compliance, Internal Audit, Finance, Operations, and other relevant functions.
• Promote operational risk awareness and a strong risk culture across the organization.
• Support regulatory reviews, audits, and risk-related assessments.
• Ensure operational risk practices are aligned with applicable Saudi Central Bank (SAMA) requirements and internal governance standards.
• Support Business Continuity and third-party/vendor risk activities where applicable.

Required Experience and Qualifications

• 5-10 years of experience in operational risk.
• Experience within banking, FinTech, financial services, or another regulated environment in Saudi Arabia is essential.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within Tamam's Risk team. The role requires close collaboration with various internal departments to ensure comprehensive risk management across the organization.