Senior Consultant – Enterprise Risk & Fraud Risk Management

Job Title: Senior Consultant – Enterprise Risk & Fraud Risk Management Location: Doha, Qatar - Onsite, Full-Time Duration: 4 Years Experience: 3-5 Years in Risk Management SupportReporting Structure Role Purpose Operate and improve KAHRAMAA’s Enterprise Risk Management framework (ISO 31000:2018) and Fraud Risk Management framework (ACFE guidelines) across all directorates, and lead Control Effectiveness Testing.Key Responsibilities: • Risk Framework Maintenance Annually review the ERM policy, procedures, risk appetite and tolerance statements, risk criteria, registers, and templates against ISO 31000 and OCEG. Maintain the Fraud Risk Management framework and fraud risk assessment methodology in line with ACFE. • Risk OperationsFacilitate risk identification and assessment workshops with department focal points across ENA, WNA, TA, Shared Services, and the President’s Directorate.Run the monthly risk review cycle; maintain enterprise and departmental risk registers.Manage Key Risk Indicators (KRIs): define, collect, validate, and escalate breaches.Monitor risk treatment plans to closure and flag overdue actions.Conduct periodic fraud risk assessments and support fraud-control improvements. • Risk ReportingPrepare monthly, quarterly, and annual ERM reports, heat maps, and KRI dashboards for PQ and the GRC Executive Team • 4. Control Effectiveness TestingPlan and perform annual CET of key internal controls linked to eGRC and enterprise risks: test design, sampling, evidence, ratings, and reports.Agree remediation actions with control owners and track them to closure. • Audit and MaturitySupport the ERM Unit during ISMS, BCMS, and QMS management-system audits where risk evidence is required.Provide evidence for the annual eGRC audit and lead the risk components of the Year 3 maturity assessment. • Training and CertificationDevelop and deliver ERM and fraud-risk training and refreshers; support the Year 3 CFE and PECB Lead Risk Manager certification cohort. • GRC TechnologyDefine risk-module requirements (risk registers, KRIs, treatment workflows, CET) and test configuration against the ERM procedures.8. Knowledge TransferCoach Qatari ERM staff to run risk workshops, KRI monitoring, and CET independently. Qualifications And Experience Education:Mandatory: Graduate Degree Preferred: Finance, Engineering, Risk Management, or Business Certifications:Mandatory: —Preferred: Any of ERMCP, OCEG GRCP, IRM IRMP, ISO 31000 Risk Manager (named by KAHRAMAA); CFE or CRMA an advantage Experience:Mandatory: 3-5 Years of Risk Management SupportPreferred: ERM in Utilities, Energy, or Infrastructure; Control Testing; Fraud Risk Assessments Skills:Mandatory: Data Analysis; Presentation Skills Preferred: Excel Modelling, Power BI, Risk Quantification; GRC Tool Risk Module Language:Mandatory: English (Fluent) Preferred: Arabic Key Competencies:Analytical rigourWorkshop facilitation with technical and operational staffSound judgement on risk ratingsClear and timely escalation Skills: framework,risk management framework,enterprise,grc,management,risk,risk management,assessment,iso,fraud

Mandatory: Graduate Degree. Preferred: Finance, Engineering, Risk Management, or Business. Certifications: Mandatory: —Preferred: Any of ERMCP, OCEG GRCP, IRM IRMP, ISO 31000 Risk Manager (named by KAHRAMAA); CFE or CRMA an advantage. Experience: Mandatory: 3-5 Years of Risk Management Support. Preferred: ERM in Utilities, Energy, or Infrastructure; Control Testing; Fraud Risk Assessments. Skills: Mandatory: Data Analysis; Presentation Skills. Preferred: Excel Modelling, Power BI, Risk Quantification; GRC Tool Risk Module. Language: Mandatory: English (Fluent). Preferred: Arabic.

Risk Framework Maintenance: Annually review the ERM policy, procedures, risk appetite and tolerance statements, risk criteria, registers, and templates against ISO 31000 and OCEG. Maintain the Fraud Risk Management framework and fraud risk assessment methodology in line with ACFE. Risk Operations: Facilitate risk identification and assessment workshops across multiple directorates; run monthly risk review cycle; maintain enterprise and departmental risk registers; manage Key Risk Indicators (KRIs); monitor risk treatment plans to closure; conduct periodic fraud risk assessments and support fraud-control improvements. Risk Reporting: Prepare monthly, quarterly, and annual ERM reports, heat maps, and KRI dashboards. CET: Plan and perform annual CET of key internal controls; agree remediation actions and track to closure. Audit and Maturity: Support ERM Unit during ISMS, BCMS, and QMS audits; provide evidence for annual eGRC audit and lead risk components of Year 3 maturity assessment. Training and Certification: Develop and deliver ERM and fraud-risk training; support Year 3 CFE and PECB Lead Risk Manager certification. GRC Technology: Define risk-module requirements and test configuration. Knowledge Transfer: Coach Qatari ERM staff to run risk workshops, KRI monitoring, and CET independently.