Risk & BCM Director

About RUA RUA is a forward-thinking institution for cross-cultural arts education and creative innovation in the Middle East that fosters bold ideas that inspire progress and transform society by cultivating industry and academic collaboration and rethinking creative education, all while creating a space for global ideas to flourish in a culturally inspiring environment. • Our Vision • To be an inspiring beacon of knowledge for future generations, integrating culture and arts, empowering students to discover passions and develop talents while fostering creativity and cultural exchange. • Our Mission • To cultivate an innovative educational environment in culture and arts, delivering cutting-edge programs that foster cultural and artistic engagement, enriching both the Saudi and global communities. • Our Aspirations • The leading cultural university across the Middle East and North Africa. • Ranked among top 50 universities worldwide specializing in cultural education. • A global hub for cultural education and knowledge exchange. Job Summary Leads enterprise risk management, business continuity, and compliance agenda by setting frameworks, and oversight mechanisms that protect institutional objectives, strengthen resilience, and ensure transparent adherence to regulatory and internal requirements. Oversees enterprise risk governance, continuity readiness, crisis preparedness, policy discipline, and integrated assurance across the institution, while providing leadership with clear reporting on risks, breaches, remediation, and decisions required. General Accountabilities Strategy and Planning • Oversee the design and implementation of Risk & Compliance department’s strategic plan, objectives, and goals ensuring alignment with RUA's strategy. • Direct and approve the department’s operational plans and oversee implementation securing achievement of identified objectives. • Develop the department’s performance objectives and indicators and continuously monitor progress towards realization of objectives. Budget Management • Participate in GRC's budgeting process and provide input from Risk & Compliance standpoint. • Ensure effective utilization of the department’s budget and report accurately on progress made and challenges encountered. Policies, Processes, and Procedures • Oversee the design and set up of Risk and Compliance department’s policies, processes and procedures to align with and exceed best-in class standards. • Oversee the implementation of procedures and controls to ensure efficiency, transparency and accountability across all business areas within the function. • Oversee regular reviews of policies, processes, guidelines, and procedures to confirm alignment with RUA requirements and market developments, and coordinate corrective actions where needed. People Management • Inspire the team and provide guidance, delegation and mentorship to create a performance-driven culture. • Ensure availability and qualification of team through recruitment, training, development and performance management. • Take actions to enhance employee engagement and motivation. • Provide clear top-down communication to employees and bottom-up feedback to senior management. Job Specific Accountabilities Enterprise Risk Governance • Oversee formulation and maintenance of the enterprise risk framework, including risk appetite, taxonomy, escalation thresholds, reporting cadence, and leadership governance. • Oversee the enterprise risk portfolio to ensure risks are identified, prioritized, owned, and managed across strategic, reputational, regulatory, academic, student safety, research, third-party, operational, and financial domains. • Monitor key risk indicators and recommend timely actions when thresholds are breached or risk exposure changes. • Ensure material risk remediation is assigned, tracked, and escalated for overdue or high-impact items. Business Continuity, Crisis, and Resilience • Oversee business continuity management so that critical functions have defined continuity expectations and validated recovery arrangements. • Direct business impact analyses, continuity plans, disaster recovery arrangements, and crisis response exercises. • Ensure lessons learned from incidents and tests are translated into improvements in controls, plans, and readiness. • Direct enterprise BCM governance and reporting across internal stakeholders and continuity partners. Compliance, Policy Governance, and Assurance • Oversee the compliance management approach, and ensure regulatory obligations are captured, translated into operational requirements, and monitored through structured reporting. • Ensure policy governance standards, centralized policy repository controls, and disciplined review cycles are applied consistently. • Coordinate integrated assurance across Risk, Compliance and relevant functions to reduce duplication and strengthen transparency. • Ensure consolidated dashboards and decision-focused reports are developed for leadership and governance bodies, highlighting risks, breaches, incidents, and decisions required. Stakeholder Interfaces • Engage with internal and external stakeholders to support risk treatment, continuity planning, preparedness, assurance, and compliance remediation. Knowledge & Experience • 8+ years of progressive experience in enterprise risk management, compliance, business continuity, resilience, governance, or a related field, including at least 4 years in a managerial role • Strong knowledge of enterprise risk frameworks, risk appetite, taxonomies, escalation practices Education & Certifications • Bachelor degree in risk management, business administration, finance, public administration law, or related discipline • Master degree in risk management, business administration, public administration, law, or a related field is preferred Internal Stakeholders • VP, Legal & GRC • Legal • Risk and BCM • Compliance • Governance • Cybersecurity • Facilities • Internal Audit • Academic and Non-Academic Leadership External Stakeholders • Regulatory and Government Authorities Relevant to Higher Education, Compliance, and Emergency Preparedness • Critical Suppliers, Service Providers, and Continuity Partners • Emergency Response and Civil Defense Agencies • Insurance and Risk Advisory Partners Why joining RUA: RUA represents a platform for discovery, a space where talent is nurtured, and a gateway for Saudi art and culture to the world. We welcome you to join us on this exceptional journey. Together, we will shape the ambitious cultural future of the Kingdom and inspire the world. As the first of its kind in the MENA region, RUA serves as a center of creativity, knowledge, and innovation, contributing to shaping the future of Saudi Arabia’s cultural ecosystem and creative economy, driving the growth of Saudi Arabia’s cultural sector in alignment with Saudi Vis

8+ years of progressive experience in enterprise risk management, compliance, business continuity, resilience, governance, or a related field, including at least 4 years in a managerial role. Bachelor degree in risk management, business administration, finance, public administration law, or related discipline. Master degree in risk management, business administration, public administration, law, or a related field is preferred.

Leads enterprise risk management, business continuity, and compliance agenda by setting frameworks, and oversight mechanisms that protect institutional objectives, strengthen resilience, and ensure transparent adherence to regulatory and internal requirements. Oversees enterprise risk governance, continuity readiness, crisis preparedness, policy discipline, and integrated assurance across the institution, while providing leadership with clear reporting on risks, breaches, remediation, and decisions required. Oversee the design and implementation of Risk & Compliance department’s strategic plan, objectives, and goals ensuring alignment with RUA's strategy. Direct and approve the department’s operational plans and oversee implementation securing achievement of identified objectives. Develop the department’s performance objectives and indicators and continuously monitor progress towards realization of objectives. Participate in GRC's budgeting process and provide input from Risk & Compliance standpoint. Ensure effective utilization of the department’s budget and report accurately on progress made and challenges encountered. Oversee the design and set up of Risk and Compliance department’s policies, processes and procedures to align with and exceed best-in class standards. Oversee the implementation of procedures and controls to ensure efficiency, transparency and accountability across all business areas within the function. Oversee regular reviews of policies, processes, guidelines, and procedures to confirm alignment with RUA requirements and market developments, and coordinate corrective actions where needed. Inspire the team and provide guidance, delegation and mentorship to create a performance-driven culture. Ensure availability and qualification of team through recruitment, training, development and performance management. Take actions to enhance employee engagement and motivation. Provide clear top-down communication to employees and bottom-up feedback to senior management. Oversee formulation and maintenance of the enterprise risk framework, including risk appetite, taxonomy, escalation thresholds, reporting cadence, and leadership governance. Oversee the enterprise risk portfolio to ensure risks are identified, prioritized, owned, and managed across strategic, reputational, regulatory, academic, student safety, research, third-party, operational, and financial domains. Monitor key risk indicators and recommend timely actions when thresholds are breached or risk exposure changes. Ensure material risk remediation is assigned, tracked, and escalated for overdue or high-impact items. Oversee business continuity management so that critical functions have defined continuity expectations and validated recovery arrangements. Direct business impact analyses, continuity plans, disaster recovery arrangements, and crisis response exercises. Ensure lessons learned from incidents and tests are translated into improvements in controls, plans, and readiness. Direct enterprise BCM governance and reporting across internal stakeholders and continuity partners. Oversee the compliance management approach, and ensure regulatory obligations are captured, translated into operational requirements, and monitored through structured reporting. Ensure policy governance standards, centralized policy repository controls, and disciplined review cycles are applied consistently. Coordinate integrated assurance across Risk, Compliance and relevant functions to reduce duplication and strengthen transparency. Ensure consolidated dashboards and decision-focused reports are developed for leadership and governance bodies, highlighting risks, breaches, incidents, and decisions required. Engage with internal and external stakeholders to support risk treatment, continuity planning, preparedness, assurance, and compliance remediation.