Consultant – Enterprise Risk Management

We’re Hiring: Consultant – Enterprise Risk Management for Dubai government entity Location: Dubai Department: Internal Audit & Enterprise Risk Management We are looking for an experienced Enterprise Risk Management (ERM) professional to join our team and support the development, implementation, and continuous improvement of the organization's risk management framework. The successful candidate will work closely with business and technology stakeholders to identify, assess, monitor, and mitigate enterprise risks while providing meaningful insights to strengthen governance, controls, and risk awareness across the organization. Key Responsibilities • Conduct comprehensive enterprise risk identification, assessment, and articulation across business and IT processes. • Apply recognized ERM frameworks and methodologies, including COSO and ISO 31000. • Analyze business processes, applications, and IT systems to identify operational risks, control gaps, and cybersecurity exposures. • Develop and maintain risk registers and consolidate business risks into the corporate risk register. • Prepare risk dashboards, reports, management presentations, and other risk-related analytics. • Facilitate risk assessment workshops with business and technology stakeholders. • Assess risk causes, existing controls, control effectiveness, and potential exposures. • Develop and recommend appropriate risk treatment and mitigation strategies. • Monitor implementation of risk mitigation plans and follow up with stakeholders to ensure timely completion. • Track risk treatment effectiveness and escalate significant issues where appropriate. • Support compliance with regulatory requirements, corporate governance standards, and internal policies. • Provide advisory support to business units and promote a strong risk-aware culture across the organization. • Participate in change management initiatives and other enterprise-wide risk projects. • Provide actionable insights and recommendations to management based on risk analysis and trends. Requirements • Bachelor's degree in Risk Management, Finance, Accounting, Business Administration, IT, or a related discipline. • Approximately 8 years of total professional experience, including 3–5 years of hands-on Enterprise Risk Management experience. • Experience with a Big Four consulting firm is highly preferred. • Strong knowledge of ERM frameworks, risk assessment methodologies, risk reporting, and control frameworks. • Practical understanding of business processes, IT processes, application controls, general IT controls, and cybersecurity principles. • Knowledge of regulatory requirements, corporate governance, and compliance practices. • Experience with risk management software and GRC platforms is preferred. • Advanced Microsoft Excel skills, particularly for risk analysis, dashboards, and reporting. Key Competencies • Strong analytical and data interpretation skills. • Excellent stakeholder management and communication abilities. • Strong facilitation and presentation skills. • Ability to identify control weaknesses and develop practical mitigation strategies. • Ability to translate complex risk information into clear, actionable recommendations. • Proactive, adaptable, and solutions-oriented approach. • Ability to manage multiple priorities and work effectively in a fast-paced environment. Ideal Candidate The ideal candidate will have strong hands-on ERM experience and the ability to work across business, IT, governance, compliance, and risk functions. Candidates with consulting experience and exposure to large, complex organizations will be particularly well suited to this opportunity. Show more Show less

Bachelor's degree in Risk Management, Finance, Accounting, Business Administration, IT, or a related discipline. Approximately 8 years of total professional experience, including 3–5 years of hands-on Enterprise Risk Management experience. Experience with a Big Four consulting firm is highly preferred. Strong knowledge of ERM frameworks, risk assessment methodologies, risk reporting, and control frameworks. Practical understanding of business processes, IT processes, application controls, general IT controls, and cybersecurity principles. Knowledge of regulatory requirements, corporate governance, and compliance practices. Experience with risk management software and GRC platforms is preferred. Advanced Microsoft Excel skills, particularly for risk analysis, dashboards, and reporting.

Conduct comprehensive enterprise risk identification, assessment, and articulation across business and IT processes. Apply recognized ERM frameworks and methodologies, including COSO and ISO 31000. Analyze business processes, applications, and IT systems to identify operational risks, control gaps, and cybersecurity exposures. Develop and maintain risk registers and consolidate business risks into the corporate risk register. Prepare risk dashboards, reports, management presentations, and other risk-related analytics. Facilitate risk assessment workshops with business and technology stakeholders. Assess risk causes, existing controls, control effectiveness, and potential exposures. Develop and recommend appropriate risk treatment and mitigation strategies. Monitor implementation of risk mitigation plans and follow up with stakeholders to ensure timely completion. Track risk treatment effectiveness and escalate significant issues where appropriate. Support compliance with regulatory requirements, corporate governance standards, and internal policies. Provide advisory support to business units and promote a strong risk-aware culture across the organization. Participate in change management initiatives and other enterprise-wide risk projects. Provide actionable insights and recommendations to management based on risk analysis and trends.