ENTERPRISE RISK MANAGEMENT (ERM) EXPERT

About the Role

Duncan & Ross is seeking an experienced Enterprise Risk Management (ERM) Expert to establish and lead a robust ERM capability within the organization. This full-time position is based in Riyadh and requires a professional with over 10 years of experience in risk management.

Role Purpose

The primary purpose of this role is to design, embed, and operationalize a comprehensive ERM framework across all business units. The expert will provide senior leadership and the Board with clear, decision-ready insights into the organization's key risks, ensuring alignment with strategic objectives and regulatory standards.

Key Responsibilities

• Design, establish, and operationalize the ERM framework, policy, methodology, and governance structure in line with ISO 31000 and COSO ERM.
• Develop and maintain the corporate risk register, ensuring risks are clearly defined, owned, assessed, and regularly reviewed.
• Define the organization's risk appetite and tolerance framework, translating it into practical thresholds for decision-making.
• Lead enterprise-wide risk assessments, workshops, and prioritization exercises with business and functional leaders.
• Collaborate with risk owners to develop risk mitigation plans and controls, and track their implementation.
• Design and monitor Key Risk Indicators (KRIs), including escalation triggers and thresholds.
• Build risk dashboards and produce clear executive and Board-level risk reporting.
• Set up and support risk governance forums and committees, including terms of reference, agendas, and follow-up of actions.
• Embed a risk-aware culture through training, awareness sessions, and guidance for risk owners and champions.
• Integrate ERM with strategic planning, internal audit, compliance, business continuity, and project governance.
• Monitor emerging risks and regulatory developments, advising leadership on their potential impact.

Qualifications and Experience

• Bachelor's degree in risk management, Business, Finance, Engineering, or a related field; Master's or MBA preferred.
• 10+ years of risk management experience, with significant hands-on experience setting up and running ERM frameworks.
• Proven track record in building corporate risk registers, risk appetite statements, and KRI frameworks from the ground up.
• Strong knowledge of ISO 31000, COSO ERM, and related governance and control frameworks.
• Experience producing executive and Board-level risk reporting and dashboards.
• Experience in government, semi-government, or regulated sectors in the GCC is highly desirable.

Required Skills

• Excellent facilitation, stakeholder management, and influencing skills at a senior level.
• Strong analytical, problem-solving, and report-writing skills.

Application Process

Candidates who meet the above requirements are encouraged to apply. Salary details will be discussed during the interview process.