ENTERPRISE RISK MANAGEMENT (ERM) EXPERT - AVIATION, TRAVEL, TOURISM, ISO 3100, COSO

About the role

We are looking for an experienced Enterprise Risk Management Expert to establish and run a robust ERM capability across the organisation. You will design the framework, embed it across business units, and give senior leadership and the Board clear, decision-ready insight into the organisation's key risks.

Key responsibilities

• Design, establish and operationalise the ERM framework, policy, methodology and governance structure, in line with ISO 31000 and COSO ERM
• Develop and maintain the corporate risk register, ensuring risks are clearly defined, owned, assessed and regularly reviewed
• Define the organisation's risk appetite and tolerance framework, and translate it into practical thresholds for decision-making
• Lead enterprise-wide risk assessments, workshops and prioritisation exercises with business and functional leaders
• Work with risk owners to develop risk mitigation plans and controls, and track their implementation
• Design and monitor Key Risk Indicators (KRIs), with escalation triggers and thresholds
• Build risk dashboards and produce clear executive and Board-level risk reporting
• Set up and support risk governance forums and committees, including terms of reference, agendas and follow-up of actions
• Embed a risk-aware culture through training, awareness sessions and guidance for risk owners and champions
• Integrate ERM with strategic planning, internal audit, compliance, business continuity and project governance
• Keep up with emerging risks and regulatory developments, and advise leadership on their impact

Requirements

• Bachelor's degree in risk management, Business, Finance, Engineering or a related field; Master's or MBA preferred
• 10+ years of risk management experience, with significant hands-on experience setting up and running ERM frameworks
• Proven track record building corporate risk registers, risk appetite statements and KRI frameworks from the ground up
• Strong knowledge of ISO 31000, COSO ERM and related governance and control frameworks
• Experience producing executive and Board-level risk reporting and dashboards
• Excellent facilitation, stakeholder management and influencing skills at senior level
• Strong analytical, problem-solving and report-writing skills
• Experience in government, semi-government or regulated sectors in the GCC is highly desirable

Preferred certifications

• ISO 31000 Lead Risk Manager, IRM certification, RIMS-CRMP, CRMA or similar
• Arabic language skills an advantage

Vertical:

Technology