Enterprise Risk Governance Manager

We're Hiring: Enterprise Risk Governance Manager
Location: United Arab Emirates (Remote)
Employment Type: Full-Time
Experience Level: Mid-Level to Senior
Work Arrangement: Fully Remote
About Us
We are a globally focused organization committed to strengthening enterprise resilience, risk governance, accountability, and informed decision-making across diverse markets.
Our teams collaborate across Risk, Compliance, Finance, Legal, Internal Audit, Operations, Technology, Cybersecurity, Business Continuity, Procurement, and business functions to identify, assess, monitor, and manage risks while maintaining effective governance and oversight.
The Role
We are seeking an experienced Enterprise Risk Governance Manager to lead enterprise risk governance frameworks, risk policies, methodologies, reporting, oversight, risk appetite, governance forums, and continuous improvement.
The ideal candidate will establish consistent enterprise risk-management practices, strengthen risk ownership and accountability, coordinate risk assessments, monitor risk exposure and emerging risks, maintain executive risk reporting, and ensure that material risks are appropriately escalated and managed.
Key Responsibilities
Develop and implement enterprise risk-governance strategies, frameworks, policies, standards, and procedures.
Establish a consistent enterprise-wide approach to risk identification, assessment, monitoring, reporting, and escalation.
Maintain the enterprise risk-management framework and ensure alignment with organizational strategy and objectives.
Define roles, responsibilities, decision rights, and accountability for risk management across business functions.
Develop and maintain enterprise risk taxonomies, risk categories, definitions, methodologies, and assessment criteria.
Establish risk appetite, risk-tolerance, thresholds, limits, and escalation criteria in collaboration with senior leadership.
Coordinate periodic enterprise risk assessments across business units, functions, projects, and geographic operations.
Facilitate identification of strategic, financial, operational, compliance, technology, cyber, people, third-party, legal, reputational, and emerging risks.
Assess risk likelihood, impact, velocity, interconnectedness, and potential business consequences.
Challenge risk assessments to ensure consistency, completeness, evidence, and appropriate management attention.
Maintain the enterprise risk register and ensure material risks have clearly assigned owners.
Monitor key enterprise risks and ensure risk owners maintain appropriate mitigation plans.
Review risk-treatment strategies, controls, action plans, deadlines, and residual-risk assessments.
Track risk-mitigation actions through completion and verify that overdue or ineffective actions are appropriately escalated.
Establish processes for identifying, assessing, and monitoring emerging risks.
Conduct horizon scanning across regulatory, economic, technological, geopolitical, environmental, market, operational, and industry developments.
Coordinate scenario analysis, stress testing, sensitivity analysis, and enterprise risk simulations where appropriate.
Support business functions in developing risk scenarios and evaluating potential impacts on strategic and operational objectives.
Develop and maintain enterprise Key Risk Indicators and risk-monitoring thresholds.
Establish processes for monitoring KRI performance, risk trends, threshold breaches, and emerging exposures.
Develop enterprise risk dashboards and management reports for executive leadership and governance committees.
Prepare risk reports covering material risks, risk appetite utilization, trends, mitigation progress, emerging risks, and significant incidents.
Support executive management and risk committees with accurate and timely risk information.
Prepare materials for Board, Board Risk Committee, Executive Risk Committee, and other governance forums where applicable.
Maintain governance calendars, agendas, action logs, decisions, risk escalations, and committee documentation.
Coordinate risk-governance meetings and ensure agreed actions are tracked to closure.
Establish clear escalation procedures for material risk events, risk appetite breaches, control failures, and significant changes in risk exposure.
Coordinate escalation of significant risks to appropriate management and governance bodies.
Develop enterprise risk policies and ensure periodic review and approval.
Monitor adherence to risk policies, methodologies, standards, and governance requirements.
Identify gaps in risk governance and coordinate corrective actions with responsible functions.
Work closely with Compliance to monitor regulatory and compliance risks and related governance requirements.
Collaborate with Internal Audit to understand assurance findings, control weaknesses, recurring issues, and areas of elevated risk.
Coordinate with Finance on financial risk, liquidity, investment, forecasting, budgeting, and financial-control considerations where relevant.
Work with Legal on legal, contractual, litigation, regulatory, and governance risks.
Coordinate with Technology and Cybersecurity teams on technology, information-security, data, resilience, and cyber risks.
Work with Business Continuity and Crisis Management teams to integrate resilience risks into enterprise risk assessments.
Coordinate with Procurement and Vendor Management teams to assess third-party, supplier, outsourcing, and concentration risks.
Support risk assessments for major projects, investments, acquisitions, new markets, products, technologies, and strategic initiatives.
Review risk implications of significant organizational changes, transformation programs, and major business decisions.
Establish risk requirements for project and program governance.
Integrate risk management into strategic planning, budgeting, investment decisions, and performance-management processes.
Develop risk-based decision-support materials for senior management.
Evaluate the effectiveness of risk controls and management responses using available assurance and performance information.
Promote the use of data, analytics, and technology to improve enterprise risk monitoring.
Manage enterprise risk-management systems, GRC platforms, risk registers, dashboards, and reporting tools.
Establish data-quality, documentation, access-control, and audit-trail requirements for risk information.
Identify opportunities to automate risk reporting, monitoring, assessments, workflow management, and escalation.
Evaluate emerging risk-management technologies, analytics, artificial intelligence, and predictive risk-monitoring capabilities.
Benchmark enterprise risk-governance practices against relevant standards, regulatory expectations, and industry practices.
Coordinate external risk assessments, consultants, assurance providers, and specialist risk advisers where required.
Define scope, deliverables, timelines, quality standards, and performance expectations for external risk partners.
Key Performance Indicators
Enterprise risk assessment completion
Enterprise risk register accuracy
Material risk identification rate
Risk assessment quality
Risk appetite framework coverage
Risk appetite utilization
Risk threshold breach frequency
Key Risk Indicator coverage
KRI reporting timeliness
KRI data quality
Material risk escalation timeliness
Risk-mitigation action completion
Overdue risk-action rate
Residual-risk reduction
High-risk issue closure rate
Emerging-risk identification
Emerging-risk assessment completion
Scenario-analysis completion
Stress-testing completion
Risk reporting accuracy
Executive risk-reporting timeliness
Board risk-reporting quality
Risk committee action closure
Risk-policy compliance
Risk-governance framework adherence
Business-unit risk assessment participation
Risk-owner accountability
Risk-control effectiveness
Risk event frequency
Material risk event response time
Risk incident escalation compliance
GRC system adoption
Risk-data completeness
Risk-data accuracy
Risk-reporting automation
Third-party risk assessment coverage
Project risk assessment coverage
Strategic initiative risk coverage
Risk-management training completion
Risk-awareness performance
External assurance findings
Risk-governance improvement completion
Enterprise resilience improvement
Ideal Candidate
The successful candidate should have strong experience in enterprise risk management, risk governance, corporate risk, governance and controls, compliance, internal audit, operational risk, or enterprise resilience, preferably within large, complex, regulated, multinational, or geographically distributed organizations.
The candidate should demonstrate:
Strong understanding of enterprise risk-management principles and governance frameworks.
Experience developing and implementing enterprise risk-management frameworks, policies, and methodologies.
Strong knowledge of risk taxonomies, risk appetite, risk tolerance, KRIs, risk registers, and risk reporting.
Experience coordinating

Work arrangement
No