Enterprise Risk Management Expert

About the role

The Enterprise Risk Management Expert will act as an internal consultant and facilitator, guiding ZATCA in developing and executing its corporate risk strategy. This senior role requires autonomous work with minimal direction, focusing on risk assessment, mitigation planning, and fostering a risk‑aware culture across the organization.

Key responsibilities

• Develop and update risk assessment methodologies, tools, and techniques in line with the latest ERP best practices.
• Review ZATCA’s business model, analyse risk appetite, and embed control criteria into functional activities.
• Conduct operational risk assessments, identify emerging risks, and integrate mitigation plans into sector and division operational plans.
• Consolidate and categorise risks, create risk factors and KPIs, and maintain the SAS risk database.
• Prioritise risks, produce a corporate risk heatmap, and communicate findings to business units.
• Design dashboards to monitor Key Risk Indicators and high‑risk exposures.
• Implement and track risk mitigation protocols covering operational, financial, fraud, and information‑security risks.
• Lead quarterly risk and control re‑assessment studies and recommend improvements.
• Deliver training sessions to cultivate a risk‑control culture and update the Risk Maturity Model.

Required profile

• Proven experience leading risk management initiatives in a large organization.
• Ability to work autonomously and provide strategic advice to senior stakeholders.
• Strong analytical mindset with a focus on continuous improvement.
• Excellent communication skills for presenting risk findings and training staff.

Required skills

• SAS