Risk Management Lead

Gathern; Riyadh; On-site; SAR 260,000 - 480,000; Full time

Job summary

Gathern is seeking an experienced Enterprise Risk Manager to strengthen its risk posture across strategic, operational, financial, and regulatory areas. You will identify, assess, and mitigate risks, maintain risk registers, and develop mitigation plans to support informed decision-making.

You will lead BIA/BCP activities, monitor KRIs, and prepare executive risk reports for the CEO and Audit Committee, promoting risk awareness across departments and driving ERM improvements.

Qualifications

• 5–7 years in risk management or internal control.
• Experience implementing or enhancing ERM frameworks.
• Experience conducting enterprise-wide risk assessments.
• Exposure to risk appetite framework development.
• Experience preparing risk reports for senior leadership.
• Proven experience establishing or enhancing ERM programs.
• Experience in technology companies, digital platforms, or fast-growing organizations preferred.
• Professional certification in ISO 31000 or equivalent preferred.
• Familiarity with ISO 31000 and COSO ERM frameworks.

Responsibilities

• Conduct enterprise risk assessments and maintain risk registers.
• Develop risk mitigation plans and monitor implementation.
• Perform risk analysis for new initiatives and projects.
• Support business continuity and incident response planning.
• Prepare risk reports for leadership and governance committees.
• Promote risk awareness culture across departments.
• Develop, maintain, and enhance the ERM framework, methodologies, tools, and templates.
• Prepare and maintain executive risk reports and dashboards for CEO and Audit Committee.
• Develop and monitor the organization's Risk Appetite, Risk Tolerance, and KRIs.
• Lead BCP/BCM activities and participate in crisis management.

Skills

Enterprise risk management

Internal controls

Risk assessment

Risk reporting

COSO ERM

ISO 31000

Regulatory/compliance risk

Business continuity planning

Executive reporting

Education

Bachelor's degree in Management/Finance

Job description

JOB PURPOSE:

Strengthen enterprise risk posture by identifying, assessing, and mitigating strategic, operational, financial, and regulatory risks, ensuring risk-informed decision-making and business continuity.

KEY ACCOUNTABILITIES:

• Conduct enterprise risk assessments and maintain risk registers.


• Develop risk mitigation plans and monitor implementation.


• Perform risk analysis for new initiatives and projects.


• Support business continuity and incident response planning.


• Prepare risk reports for leadership and governance committees.


• Promote risk awareness culture across departments.


• Develop, maintain, and continuously enhance the Enterprise Risk Management (ERM) framework, methodologies, tools, and templates across the organization.


• Prepare and maintain executive risk reports and dashboards for the CEO and the Audit Committee to support informed decision-making and governance oversight.


• Develop, monitor, and periodically review the organization's Risk Appetite, Risk Tolerance, and Key Risk Indicators (KRIs).


• Lead Business Continuity Management activities, including Business Impact Analysis (BIA), Business Continuity Planning (BCP), and participation in crisis management and incident response activities.


• Drive the implementation and continuous improvement of Enterprise Risk Management practices across the organization.

Education:

• Bachelor’s degree in Management, Finance, or related field.

Experience:

• 5–7 years in risk management or internal control.


• Experience implementing or enhancing ERM frameworks.


• Proven experience conducting enterprise-wide risk assessments.


• Exposure to risk appetite framework development.


• Experience preparing risk reports for senior leadership.


• Proven experience in establishing, designing, or enhancing Enterprise Risk Management (ERM) programs.


• Experience within technology companies, digital platforms, or fast-growing organizations is preferred.


• Professional certification in ISO 31000 Risk Management or an equivalent risk management certification is preferred.


• Practical knowledge of internationally recognized risk management and governance frameworks, including ISO 31000 and COSO Enterprise Risk Management (COSO ERM


• Familiarity with regulatory and compliance risk environments.