G42 - Risk Management Specialist

Risk Identification: The ERM Specialist is responsible for identifying all potential risks faced by the organization, including financial, operational, strategic, and reputational risks. This includes analyzing existing data and identifying new risks that may arise due to changes in the business environment.

Risk Assessment: Once risks have been identified, the ERM Specialist will assess the likelihood and potential impact of each risk. This involves using various quantitative and qualitative methods to determine the severity of each risk and prioritize them accordingly.

Risk Mitigation: After identifying and assessing risks, the ERM Specialist will work with various departments to develop and implement risk mitigation strategies. This includes developing policies and procedures to minimize the impact of potential risks and conducting training sessions to ensure all employees are aware of their roles and responsibilities.

Risk Monitoring: The ERM Specialist must monitor the effectiveness of the organization's risk management strategies and make adjustments as necessary. This includes identifying new risks, assessing the effectiveness of existing strategies, and communicating any changes or updates to stakeholders.

Reporting: The ERM Specialist must provide regular reports to senior management and other stakeholders regarding the organization's risk profile, including the status of ongoing risk management initiatives and any changes or updates to the risk environment.

Compliance: The ERM Specialist must ensure that the organization is compliant with all relevant regulations and standards related to risk management, such as ISO 31000, COSO, or other industry-specific standards.

Collaborate: The ERM Specialist must work with various departments and stakeholders, such as internal audit, legal, finance, and operations to ensure risk management is integrated into the organization's daily activities.

- Overall, the Enterprise Risk Management Specialist plays a critical role in identifying, assessing, and mitigating risks faced by an organization, helping to ensure its long-term success and sustainability.

- Proactive communication and engagement on risk management across the Injazat divisions

- Ability to articulate risks and prepare risk reports (executive and detailed level)

- Communicate risk management progress and results to the appropriate stakeholders in Finance, Operations, Sales and Corporate.

- Contribute to the budgeting process (for departments and projects)

- Continuously improve the risk management process and maturity through adoption of tools and processes.

- Contribute during departmental and corporate process improvement initiatives.

- Ensure compliance with ERM Policy and Framework.

- Ensure compliance to ISO, COSO and IT Risk Management standards

- Work with Cyber Security Team to identify security and cyber risks, and risk oversight.

- Hands on expertise in Risk Management and GRC tools like Service Now GRC

- Perform other related duties or assignments as directed.

To qualify you must have :

- Bachelor's degree in computer science

- 5 to 7 years of experience in risk management, preferably in a technology industry

- ISO 31000 LI and LA Certification preferred

- CRISC certified.

- Enterprise Risk Management Tool Experience on Service Now

- Working experience with Microsoft tool and MS PowerBI.

- Experience engaging with client customers at diverse levels, from senior management to junior level personnel.