Risk Management Lead

Gathern | جاذر إن; Riyadh; On-site; SAR 260,000 - 420,000; Full time

Job summary

Gathern | جاذر إن is seeking a senior leader to strengthen the enterprise risk posture. You will identify, assess, and mitigate strategic, operational, financial, and regulatory risks, ensuring risk-informed decision-making and business continuity.

You will develop and maintain the ERM framework, lead BIA/BCP, and prepare executive risk dashboards for governance oversight, collaborating with senior leadership to embed risk awareness across the organization.

Qualifications

• Broad experience in risk management and internal control.
• Familiarity with ISO 31000 and COSO ERM frameworks.
• Exposure to governance, risk, and compliance environments.

Responsibilities

• Conduct enterprise risk assessments and maintain risk registers
• Develop risk mitigation plans and monitor implementation
• Perform risk analysis for new initiatives and projects
• Support business continuity and incident response planning
• Prepare risk reports for leadership and governance committees
• Promote risk awareness culture across departments
• Develop and maintain the ERM framework, methodologies, tools, and templates
• Prepare executive risk reports and dashboards for CEO and Audit Committee
• Develop and monitor Risk Appetite, Risk Tolerance, and KRIs
• Lead Business Continuity Management activities including BIA and BCP

Skills

Enterprise risk management

Regulatory compliance

Risk assessment

Business continuity planning

Executive reporting

Education

Bachelor's degree in Management or Finance

ISO 31000 certification

Job description

JOB PURPOSE

Strengthen enterprise risk posture by identifying, assessing, and mitigating strategic, operational, financial, and regulatory risks, ensuring risk-informed decision-making and business continuity.

Strengthen enterprise risk posture by identifying, assessing, and mitigating strategic, operational, financial, and regulatory risks, ensuring risk-informed decision-making and business continuity.

KEY ACCOUNTABILITIES

• Conduct enterprise risk assessments and maintain risk registers


• Develop risk mitigation plans and monitor implementation


• Perform risk analysis for new initiatives and projects


• Support business continuity and incident response planning


• Prepare risk reports for leadership and governance committees


• Promote risk awareness culture across departments


• Develop, maintain, and continuously enhance the Enterprise Risk Management (ERM) framework, methodologies, tools, and templates across the organization


• Prepare and maintain executive risk reports and dashboards for the CEO and the Audit Committee to support informed decision-making and governance oversight


• Develop, monitor, and periodically review the organization's Risk Appetite, Risk Tolerance, and Key Risk Indicators (KRIs)


• Lead Business Continuity Management activities, including Business Impact Analysis (BIA), Business Continuity Planning (BCP), and participation in crisis management and incident response activities


• Drive the implementation and continuous improvement of Enterprise Risk Management practices across the organization

Requirements

Education

• Bachelor's degree in Management, Finance, or related field

Experience

• 5-7 years in risk management or internal control.


• Experience implementing or enhancing ERM frameworks


• Proven experience conducting enterprise-wide risk assessments


• Exposure to risk appetite framework development


• Experience preparing risk reports for senior leadership


• Proven experience in establishing, designing, or enhancing Enterprise Risk Management (ERM) programs


• Experience within technology companies, digital platforms, or fast-growing organizations is preferred


• Professional certification in ISO 31000 Risk Management or an equivalent risk management certification is preferred


• Practical knowledge of internationally recognized risk management and governance frameworks, including ISO 31000 and COSO Enterprise Risk Management (COSO ERM


• Familiarity with regulatory and compliance risk environments