Governance, Risk and Compliance Lead

SOHAR; Muscat; On-site; OMR 20,000 - 42,000; Full time

Job summary

SOHAR seeks a seasoned governance, risk and compliance leader to drive the organization’s GRC framework in line with applicable laws, OIA requirements, and international best practices. You will oversee governance structures, policies and reporting, and provide strategic guidance to executive management.

The role requires 8–10 years of relevant experience, a bachelor’s degree in a related field, and a CRCMP-like certification is highly desirable.

Qualifications

• Minimum qualification includes a bachelor’s degree in business admin, finance or law.
• CRCMP or similar certification is highly desirable.

Responsibilities

• Lead the development, implementation, and continuous enhancement of GRC framework.
• Provide oversight of governance framework and enhancement initiatives.
• Oversee governance structures, registers, authorities, and documentation.
• Review and enhance governance policies, frameworks, and guidelines.
• Monitor governance practices and advise on improvements to Executive Management.
• Provide governance reporting and strategic advice to Executive Management and committees.
• Oversee Board and Management Committee governance arrangements and reporting.

Skills

Risk management

Compliance

Audit

Regulatory affairs

Analytical skills

Education

Bachelor’s degree in Business Administration, Finance, Law, or a relevant discipline

CRCMP or similar certification (desirable)

Job description

Corporate Governance

• Lead the development, implementation, and
  continuous enhancement of the organization's Governance, Risk and Compliance
  (GRC) framework in alignment with applicable laws, regulations, OIA governance
  requirements, and international best practices.
• Provide oversight of the organization's
  governance framework and governance enhancement initiatives to ensure effective
  governance practices across the organization.
• Oversee the establishment and maintenance of
  governance structures, registers, delegated authorities, and governance
  documentation.
• Lead the review and enhancement of
  governance policies, frameworks, procedures, and guidelines to ensure continued
  alignment with business objectives and regulatory expectations.
• Monitor the effectiveness of governance
  practices and provide recommendations to Executive Management on governance
  improvements.
• Provide governance reporting and strategic
  advice to Executive Management and relevant governance committees.
• Oversee Board and Management Committee
  governance arrangements, including governance structures, authorities, and
  reporting mechanisms.

Risk Management

• Provide oversight of risk assessment
  activities to identify strategic, operational, financial, compliance, and
  reputational risks and support the development of appropriate mitigation
  strategies.
• Lead the development and enhancement of risk
  management policies, procedures, and control frameworks across the
  organization.
• Monitor and evaluate the effectiveness of
  risk management programs and recommend improvements where necessary.
• Oversee the organization's risk management
  and risk control processes to ensure alignment with business objectives and
  regulatory requirements.
• Ensure effective coordination with relevant
  functions across the organization to support the implementation of risk
  management practices and regulatory compliance requirements.
• Provide guidance and recommendations to
  management on risk exposures, mitigation measures, and emerging risk trends.
• Oversee the development of risk-based audit
  plans in collaboration with Internal Audit and relevant stakeholders.
• Monitor the implementation of corrective
  actions arising from risk assessments, audits, reviews, and other assurance
  activities.
• Contribute to the continuous enhancement of
  risk management practices, methodologies, and frameworks in response to
  emerging risks, regulatory developments, and industry trends.

Third-Party Risk Management & Due Diligence

• Lead the development and implementation of
  third-party risk management and due diligence frameworks.
• Provide oversight of risk-based due
  diligence, sanctions screening, and integrity assessments relating to tenants,
  investors, suppliers, service providers, vessels, and other business partners.
• Oversee third-party risk classification,
  monitoring, escalation, and ongoing review processes.
• Advise management on compliance, sanctions,
  regulatory, integrity, and reputational risks associated with third parties and
  recommend appropriate mitigation measures.
• Oversee the effectiveness of third-party
  risk monitoring and due diligence processes and drive continuous improvement
  initiatives.

Compliance Management

• Lead the development and enhancement of the
  organization's compliance framework, policies, procedures, and monitoring
  mechanisms.
• Provide oversight of compliance programs to
  ensure adherence to applicable laws, regulations, internal policies, and
  ethical standards.
• Monitor regulatory developments and advise
  management on emerging compliance obligations and their impact on the
  organization.
• Provide strategic guidance on ethics,
  anti-corruption, data privacy, information security, and regulatory compliance
  matters.
• Oversee the management of compliance
  incidents, investigations, and remediation activities and ensure appropriate
  corrective actions are implemented.
• Act as a trusted advisor to Executive
  Management on governance, risk, compliance, and ethical conduct matters.
• Maintain effective engagement with Internal
  Audit, External Auditors, Regulators, and other assurance providers on
  governance, risk, and compliance matters.

Budgets and Plans:

• Monitor the financial
  performance of a given area of activity versus budgets and ensure all
  activities are carried out in line with the approved guidelines while promptly
  reporting on any variances to management.

Corporate Strategy & Strategy Formulation, Implementation and Planning

• Formulate/provide
  input on governance, risk, compliance, and ethical conduct matters and
  lead their implementation in line with the Organization’s vision, mission and
  corporate objectives.

Policies, Systems, Processes & Procedures

• Lead the
  development, enhancement, and implementation of governance, risk, compliance,
  and due diligence policies, systems, procedures, and frameworks to ensure
  compliance with applicable legislative, regulatory, and organizational
  requirements while delivering effective and value-added services.

Continuous Improvement

• Drive the
  identification and implementation of opportunities for continuous improvement
  and sustainability of governance, risk, compliance, systems, processes, and
  practices, taking into account industry best practices, operational
  effectiveness, and organizational objectives.

Quality, Health, Safety, & Environment

• Ensure
  compliance with all relevant quality, health, safety, and environmental
  policies, procedures, and controls within the area of responsibility to support
  employee safety, regulatory compliance, service excellence, and responsible
  environmental practices.

Statement and Reports

• Oversee the preparation and submission of
  governance, risk, compliance, and departmental reports to ensure timely,
  accurate, and meaningful reporting in accordance with o
  rganizational
  requirements, policies, and standards.

Requirements

Minimum Qualification

• Bachelor’s
  degree in Business Administration, Finance, Law, or a relevant discipline.
• Certified
  Risk and Compliance Management Professional (CRCMP) or similar certification is
  highly desirable.

Minimum Experience & Knowledge & Skills

• 8 to 10 years of relevant experience in risk
  management, compliance, audit, or a related field.
• Proven experience in risk management, compliance, or
  regulatory affairs.
• Demonstrated experience in developing and
  implementing risk management and compliance frameworks.
• Experience in conducting risk assessments, audits,
  and investigations.
• Understanding of corporate governance principles and
  their application.
• Knowledge of emerging risk trends and their
  potential impact on the organization.
• Familiarity with risk management software and tools.
• Good analytical skills with the ability to identify
  and evaluate potential risks and compliance issues.
• E