ENTERPRISE RISK MANAGEMENT (ERM) EXPERT - AVIATION, TRAVEL, TOURISM, ISO 3100, COSO

Duncan & Ross Consulting; Riyadh; On-site; SAR 420,000 - 640,000; Full time

Job summary

Duncan & Ross Consulting is seeking an experienced Enterprise Risk Management (ERM) Expert to establish and run a robust ERM capability across the organisation in the aviation, travel and tourism sector. You will design the framework, embed it across business units, and provide senior leadership and the Board with clear, decision-ready insights into the organisation's key risks.

Responsibilities include developing the risk framework, maintaining the risk register and KRIs, and delivering

Qualifications

• Bachelor’s degree in risk management, business, finance, engineering or related field; Master’s or MBA preferred.
• 10+ years of risk management experience with hands-on ERM implementation.
• Proven track record building corporate risk registers, risk appetite statements and KRI frameworks.
• Strong knowledge of ISO 31000, COSO ERM and related governance and control frameworks.
• Experience producing executive and Board-level risk reporting and dashboards.

Responsibilities

• Design, establish and operationalise the ERM framework, policy, methodology and governance structure.
• Develop and maintain the corporate risk register with clear ownership and assessment.
• Define risk appetite and tolerance framework and translate into practical thresholds.
• Lead enterprise-wide risk assessments and prioritisation workshops.
• Work with risk owners to develop mitigation plans and track implementation.
• Design and monitor KRIs, with escalation triggers and thresholds.
• Build risk dashboards and executive/Board-level reporting.
• Set up risk governance forums and follow up actions.
• Embed a risk-aware culture through training and guidance for risk owners.
• Integrate ERM with strategic planning, internal audit, compliance and governance.
• Keep up with emerging risks and regulatory developments.

Skills

ERM framework design

Risk governance

KRI design

Executive reporting

Stakeholder management

Education

Bachelor's degree in risk management / related field

Master’s/MBA preferred

Job description

ENTERPRISE RISK MANAGEMENT (ERM) EXPERT - AVIATION, TRAVEL, TOURISM, ISO 3100, COSO

Job Openings ENTERPRISE RISK MANAGEMENT (ERM) EXPERT - AVIATION, TRAVEL, TOURISM, ISO 3100, COSO

About the job ENTERPRISE RISK MANAGEMENT (ERM) EXPERT - AVIATION, TRAVEL, TOURISM, ISO 3100, COSO

About the role

We are looking for an experienced Enterprise Risk Management Expert to establish and run a robust ERM capability across the organisation. You will design the framework, embed it across business units, and give senior leadership and the Board clear, decision-ready insight into the organisation's key risks.

Key responsibilities

• Design, establish and operationalise the ERM framework, policy, methodology and governance structure, in line with ISO 31000 and COSO ERM
• Develop and maintain the corporate risk register, ensuring risks are clearly defined, owned, assessed and regularly reviewed
• Define the organisation's risk appetite and tolerance framework, and translate it into practical thresholds for decision-making
• Lead enterprise-wide risk assessments, workshops and prioritisation exercises with business and functional leaders
• Work with risk owners to develop risk mitigation plans and controls, and track their implementation
• Design and monitor Key Risk Indicators (KRIs), with escalation triggers and thresholds
• Build risk dashboards and produce clear executive and Board-level risk reporting
• Set up and support risk governance forums and committees, including terms of reference, agendas and follow-up of actions
• Embed a risk-aware culture through training, awareness sessions and guidance for risk owners and champions
• Integrate ERM with strategic planning, internal audit, compliance, business continuity and project governance
• Keep up with emerging risks and regulatory developments, and advise leadership on their impact

Requirements

• Bachelor's degree in risk management, Business, Finance, Engineering or a related field; Master's or MBA preferred
• 10+ years of risk management experience, with significant hands-on experience setting up and running ERM frameworks
• Proven track record building corporate risk registers, risk appetite statements and KRI frameworks from the ground up
• Strong knowledge of ISO 31000, COSO ERM and related governance and control frameworks
• Experience producing executive and Board-level risk reporting and dashboards
• Excellent facilitation, stakeholder management and influencing skills at senior level
• Strong analytical, problem-solving and report-writing skills
• Experience in government, semi-government or regulated sectors in the GCC is highly desirable

Preferred certifications

• ISO 31000 Lead Risk Manager, IRM certification, RIMS-CRMP, CRMA or similar