Manager Enterprise Risk GRC Middle East📣 Job Ad

About the Role

Deloitte is seeking a Manager, Enterprise Risk GRC to join its team in the Middle East, based in Jeddah, Makkah, Saudi Arabia. This full-time position offers the opportunity to contribute to impactful client solutions within one of the largest professional services firms globally, fostering an inclusive culture.

Key Responsibilities

• Lead and manage full-lifecycle Archer implementation programmes, covering scoping, planning, resourcing, budgeting, risk/issue management, and executive reporting.
• Act as the primary client contact for engagement delivery, managing expectations of CROs, CISOs, Heads of Compliance, and programme sponsors.
• Define target-state GRC operating models, Archer solution architectures, and multi-year platform roadmaps for various use cases including ORM, BCM, TPRM, Operational Resilience, Policy, Audit, and Compliance.
• Provide quality assurance and design authority over solution designs, configurations, and deliverables produced by the team.
• Lead teams of 3–10 consultants across multiple geographies, managing utilization, coaching, performance feedback, and career development.
• Drive business development activities, including identifying opportunities, leading proposals and orals, shaping commercial models, and building relationships with Archer alliance teams.
• Advise clients on the regulatory alignment of their GRC programmes, such as SAMA BCM requirements, CBUAE operational resilience expectations, and central bank outsourcing rules.
• Contribute to practice development through accelerators, methodologies, thought leadership, and internal training initiatives.

GRC Domain Expertise

Candidates must possess specific expertise in the following GRC domains:

• Business Continuity Management (BCM): Substantial experience designing and implementing BCM programmes and technology, including BIA methodology, continuity/DR planning, exercising regimes, and crisis management aligned to ISO 22301 and regional central bank BCM regulations.
• Third-Party Risk Management (TPRM): Proven delivery of TPRM transformations, encompassing third-party risk operating models, tiering and due-diligence methodologies, assessment automation, continuous monitoring, and fourth-party/concentration risk considerations.
• Operational Resilience: Strong grasp of Operational Resilience regimes, including critical/important business services, impact tolerances, severe-but-plausible scenario testing, and resource mapping, with the ability to translate these into Archer solution designs.
• Integrated Risk Management: Ability to advise on the convergence of BCM, TPRM, and resilience within an integrated risk management framework.

Leadership Expectations

• Builds understanding of the firm's purpose and values, exploring opportunities for impact.
• Demonstrates strong commitment to personal learning and development, acting as a brand ambassador to attract talent.
• Understands expectations and demonstrates personal accountability for performance.
• Actively focuses on developing effective communication and relationship-building skills.
• Understands how daily work contributes to team and business priorities.

Required Experience

Candidates should have 5-10 years of relevant experience, with substantial experience in designing and implementing GRC programmes and technology, particularly within the specified GRC domains.

Location and Employment Type

This is a full-time position located in Jeddah, Makkah, Saudi Arabia.