Manager - Cyber Consulting Services

CPX; Abu Dhabi; On-site; AED 320,000 - 460,000; Full time

Job summary

CPX in Abu Dhabi is seeking a Manager – GRC Services (Risk Management) to lead the day-to-day delivery of risk engagements and mentor a team of consultants.

You will design and implement enterprise and operational risk frameworks, align to ISO 31000/COSO, and manage client relationships, budgets and timelines to ensure high-quality outcomes for clients in the UAE and across accounts.

Qualifications

• Minimum 7 years in risk-management, consulting or advisory.
• At least 2 years leading engagements and teams end-to-end.
• Experience designing ERM, risk appetite and control assessments.
• Experience with cyber risk programs preferred.
• Bachelor’s degree in CS/IT/Cybersecurity; Master’s preferred.

Responsibilities

• Lead assessment, design and implementation of risk frameworks aligned to ISO 31000 and COSO ERM.
• Plan, manage and deliver risk engagements including ERM design and KRI reporting.
• Develop risk registers, heat maps, risk appetite statements and governance structures.
• Manage engagement scope, timelines, budgets and quality; escalate as needed.
• Coach consultants and analysts; manage resourcing across engagements.
• Support proposal development, scoping and pricing for risk opportunities.
• Identify follow-on opportunities within existing accounts.

Skills

ERM

Operational risk

Emerging risk

Project management

Client mgmt

Team leadership

Communication

Education

Bachelor’s in CS/IT

Master’s degree preferred

Tools

ServiceNow GRC

RSA Archer

Power BI

Tableau

Excel

MS 365

Job description

Overview

The Manager – GRC Services (Risk Management) is responsible for the day-to-day delivery of risk management advisory engagements, leading engagement teams to design, implement and enhance enterprise and operational risk frameworks for clients. Reporting to the Director – GRC Services, the role combines hands-on technical delivery with team leadership, client relationship management and support to business development, ensuring engagements are delivered to a high standard, on time and within budget.

Responsibilities

• Lead the assessment, design and implementation of operational, strategic, financial and emerging-risk frameworks aligned to ISO 31000, COSO ERM and relevant regulatory expectations. Plan, manage and deliver risk management engagements, including enterprise risk management (ERM) framework design, risk appetite and tolerance setting, risk and control self-assessments, key risk indicators and risk reporting
• Develop risk registers, heat maps, risk appetite statements, policies, procedures and governance structures tailored to client needs.
• Manage engagement scope, timelines, budgets, deliverables and quality, escalating issues to the Director as needed.
• Act as a primary day-to-day client contact, building strong working relationships with risk, audit and operational stakeholders.
• Present findings, recommendations and deliverables clearly to management and, where appropriate, board and committee audiences.
• Lead, coach and review the work of consultants and analysts, providing direction, feedback and on-the-job development.
• Manage resourcing and workload allocation across concurrent engagements
• Support proposal development, scoping and pricing for risk management opportunities.
• Identify follow-on and cross-service opportunities within existing accounts.

Skills

• Strong risk-management technical skills across ERM, operational and emerging risk.
• Project and engagement management, including scope, budget and quality control.
• Client relationship management and clear written and verbal communication.
• Team leadership and coaching skills.

Tools Experience

• GRC and risk management platforms (e.g. ServiceNow GRC, RSA Archer or equivalent).
• Reporting and BI tools (e.g. Power BI, Tableau) and advanced Excel for risk analytics and dashboards.
• Risk register, heat-map and KRI/KPI tooling.
• Microsoft 365 or equivalent productivity and collaboration suites.

Qualifications

Minimum Work Experience & Education

• Minimum 7 years of relevant risk-management experience, including experience in a consulting or advisory environment.
• Minimum 2 years managing engagement and teams end to end.
• Demonstrated experience designing or implementing ERM frameworks, risk appetite and control assessments.
• Experience supporting national / sector-wide cyber risk and maturity programmes — such as the National Cybersecurity Index Program — including cyber risk scoring, maturity assessment and KRI/KPI design, is strongly preferred.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Master’s degree preferred.