Manager Enterprise Risk GRC Middle East📣 Job Ad

About Deloitte

Deloitte is one of the largest professional services firms globally, committed to making an impact for clients, our people, and society. We aim to serve clients distinctively by providing insights, solving complex challenges, and fostering sustainable growth. Deloitte supports talented professionals in delivering value within an inclusive and collaborative culture, contributing to society by building market confidence, upholding organizational integrity, and supporting communities.

The Role: Manager, Enterprise Risk GRC Middle East

Deloitte is seeking a Manager, Enterprise Risk GRC Middle East to join our full-time team in Riyadh, Saudi Arabia. This role requires 5-10 years of relevant experience and focuses on leading GRC implementation programs and advising clients on regulatory alignment within the GRC domain.

Key Responsibilities

• Lead and manage full-lifecycle Archer implementation programs, including scoping, planning, resourcing, budgeting, risk/issue management, and executive reporting.
• Serve as the primary client contact for engagement delivery, managing expectations of CROs, CISOs, Heads of Compliance, and program sponsors.
• Define target-state GRC operating models, Archer solution architectures, and multi-year platform roadmaps for ORM, BCM, TPRM, Operational Resilience, Policy, Audit, and Compliance use cases.
• Provide quality assurance and design authority for solution designs, configurations, and team deliverables.
• Lead teams of 3–10 consultants across various geographies, managing utilization, coaching, performance feedback, and career development.
• Drive business development activities, including identifying opportunities, leading proposals and orals, shaping commercial models, and building relationships with Archer alliance teams.
• Advise clients on regulatory alignment for their GRC programs, such as SAMA BCM requirements, CBUAE operational resilience expectations, and central bank outsourcing rules.
• Contribute to practice development through accelerators, methodologies, thought leadership, and internal training initiatives.

Required GRC Domain Expertise

Candidates for this role must possess substantial experience in the following GRC domains:

• Designing and implementing BCM programs and technology, including BIA methodology, continuity/DR planning, exercising regimes, and crisis management aligned with ISO 22301 and regional central bank BCM regulations.
• Proven delivery of TPRM transformations, covering third-party risk operating models, tiering and due-diligence methodologies, assessment automation, continuous monitoring, and fourth-party/concentration risk considerations.
• A strong understanding of Operational Resilience regimes, including critical/important business services, impact tolerances, severe-but-plausible scenario testing, and resource mapping, with the ability to translate these into Archer solution designs.
• The ability to advise on the convergence of BCM, TPRM, and resilience within an integrated risk management framework.

Leadership Capabilities

As a Manager, you are expected to demonstrate and further develop the following leadership capabilities:

• Build an understanding of Deloitte's purpose and values, exploring opportunities for impact.
• Demonstrate a strong commitment to personal learning and development, acting as a brand ambassador to attract talent.
• Understand expectations and show personal accountability for maintaining performance.
• Actively focus on developing effective communication and relationship-building skills.
• Understand how daily work contributes to the priorities of the team and the business.

Our Shared Values

Our shared values guide our behavior and commitment to making a positive, enduring impact:

• Lead the way
• Serve with integrity
• Take care of each other
• Foster inclusion
• Collaborate for measurable impact