Risk Manager – Enterprise Risk Management

Job Overview • We are seeking an experienced Senior Risk Manager to lead and embed Enterprise Risk Management (ERM) across the Group. The role will own the design, implementation, and continuous improvement of the ERM framework across a diversified portfolio that includes construction and EPC, investments and assets, hospitality, and technology. It will make sure that key risks are identified, assessed, owned, and reported, and that they actively inform strategic, investment, and project decisions. • The ideal candidate will bring deep ERM experience in construction, EPC, infrastructure, or large-scale contracting environments. Exposure to investment appraisal, capital projects, and the oil and gas sector will be highly advantageous. Key Responsibilities ERM Framework & Governance • Develop, implement, and maintain the Group ERM framework, policy, and methodology in line with ISO 31000 and COSO ERM (2017). • Define and periodically refresh the Group risk appetite statement, tolerance levels, and risk rating criteria, and cascade them to business groups and major projects. • Establish risk governance structures, including risk ownership, a network of risk champions, and escalation protocols. Risk Identification, Assessment & Monitoring • Facilitate top-down strategic risk assessments with executive management and bottom-up operational risk assessments with business groups. • Maintain Group, business-group, and project-level risk registers. Make sure each risk has a clear owner, assessed controls, and time-bound mitigation actions. • Design and monitor Key Risk Indicators (KRIs) with defined thresholds and triggers. • Lead horizon scanning for emerging risks, including market, regulatory, geopolitical, supply chain, and climate risks. Project & Investment Risk • Embed risk management into the capital project lifecycle, from feasibility and tendering through execution and close-out. • Lead or oversee quantitative schedule and cost risk analysis (for example, Monte Carlo simulation) to support contingency setting, bid/no-bid decisions, and project forecasts. • Provide independent risk opinions on new investments, acquisitions, joint ventures, and major tenders, including contractual risk allocation and counterparty exposure. • Assess risks related to procurement, subcontractors, claims and variations, and project cash flow. Reporting & Integration • Prepare consolidated risk reports and dashboards for executive management, the Audit Committee, and the Board. • Integrate risk management into strategic planning, budgeting, and performance management. • Coordinate with Internal Audit, Compliance, and other assurance providers under a combined assurance model, so that risk information feeds the risk-based audit plan. • Support business continuity, crisis management, and insurance risk transfer reviews where relevant. Risk Culture & Leadership • Build risk awareness and capability through training, workshops, and guidance for management and risk champions. • Lead, mentor, and develop risk management team members. • Contribute to the selection, configuration, and adoption of GRC and risk management technology. Qualifications & Experience • Bachelor’s degree in Engineering, Finance, Accounting, Quantity Surveying, Risk Management, or a related field. A relevant Master’s degree is an advantage. • 12–15 years of total professional experience, with at least 8 years in ERM or risk management roles. • Proven experience designing and implementing ERM frameworks in a group or multi-entity environment. • Strong experience in construction, EPC, infrastructure, or large-scale contracting environments. • Practical experience with project risk management and quantitative risk analysis tools such as Primavera Risk Analysis, Safran Risk, or @RISK. • Exposure to investment appraisal and capital projects is essential. • Oil and gas industry experience will be a strong advantage. • Preferred certifications include IRM (CertIRM or Fellowship), PMI-RMP, RIMS-CRMP, ISO 31000 Lead Risk Manager, CRMA, or FRM. CIA, ACCA, CPA, or CMA are also valued. • Big 4 risk advisory experience and familiarity with GRC platforms (such as SAP GRC, Archer, or MetricStream) and ERP systems (SAP or Oracle) are advantageous. • Preference will be given to candidates with hands-on ERM implementation experience in construction or EPC groups, exposure to investment and capital project risk, and additional experience in oil and gas.

Bachelor’s degree in Engineering, Finance, Accounting, Quantity Surveying, Risk Management, or a related field. A relevant Master’s degree is an advantage. 12–15 years of total professional experience, with at least 8 years in ERM or risk management roles. Proven experience designing and implementing ERM frameworks in a group or multi-entity environment. Strong experience in construction, EPC, infrastructure, or large-scale contracting environments. Practical experience with project risk management and quantitative risk analysis tools such as Primavera Risk Analysis, Safran Risk, or @RISK. Exposure to investment appraisal and capital projects is essential. Oil and gas industry experience will be a strong advantage. Preferred certifications include IRM (CertIRM or Fellowship), PMI-RMP, RIMS-CRMP, ISO 31000 Lead Risk Manager, CRMA, or FRM. CIA, ACCA, CPA, or CMA are also valued. Big 4 risk advisory experience and familiarity with GRC platforms (such as SAP GRC, Archer, or MetricStream) and ERP systems (SAP or Oracle) are advantageous. Preference will be given to candidates with hands-on ERM implementation experience in construction or EPC groups, exposure to investment and capital project risk, and additional experience in oil and gas.

Develop, implement, and maintain the Group ERM framework, policy, and methodology in line with ISO 31000 and COSO ERM (2017). Define and periodically refresh the Group risk appetite statement, tolerance levels, and risk rating criteria, and cascade them to business groups and major projects. Establish risk governance structures, including risk ownership, a network of risk champions, and escalation protocols. Facilitate top-down strategic risk assessments with executive management and bottom-up operational risk assessments with business groups. Maintain Group, business-group, and project-level risk registers. Make sure each risk has a clear owner, assessed controls, and time-bound mitigation actions. Design and monitor Key Risk Indicators (KRIs) with defined thresholds and triggers. Lead horizon scanning for emerging risks, including market, regulatory, geopolitical, supply chain, and climate risks. Embed risk management into the capital project lifecycle, from feasibility and tendering through execution and close-out. Lead or oversee quantitative schedule and cost risk analysis (for example, Monte Carlo simulation) to support contingency setting, bid/no-bid decisions, and project forecasts. Provide independent risk opinions on new investments, acquisitions, joint ventures, and major tenders, including contractual risk allocation and counterparty exposure. Assess risks related to procurement, subcontractors, claims and variations, and project cash flow. Prepare consolidated risk reports and dashboards for executive management, the Audit Committee, and the Board. Integrate risk management into strategic planning, budgeting, and performance management. Coordinate with Internal Audit, Compliance, and other assurance providers under a combined assurance model, so that risk information feeds the risk-based audit plan. Support business continuity, crisis management, and insurance risk transfer reviews where relevant. Build risk awareness and capability through training, workshops, and guidance for management and risk champions. Lead, mentor, and develop risk management team members. Contribute to the selection, configuration, and adoption of GRC and risk management technology.