Establish, implement, and maintain the Group-wide enterprise risk management, internal controls, and compliance framework across Algihaz Holding and its subsidiaries. Provide Executive Management, Board Committees, and the Board of Directors with independent visibility over strategic, operational, financial, project, and compliance risks while strengthening governance, control effectiveness, and risk ownership across the Group.

Responsibilities

• Establish and maintain the Group Enterprise Risk Management framework, including risk-assessment methodologies, risk-appetite statements, governance requirements, and reporting standards.

• Develop, consolidate, and continuously update the Group Risk Register across all business units and subsidiaries, ensuring clear risk ownership, mitigation actions, and target dates.

• Coordinate risk-identification workshops, review and constructively challenge management risk assessments, and monitor emerging risks and mitigation progress.

• Design and implement a Group-wide Internal Control Framework aligned with COSO principles, including Risk and Control Matrices, control assessments, self-assessments, and management certifications.

• Identify control deficiencies, agree remediation plans with management, monitor corrective actions, and support process standardization and governance improvements across subsidiaries.

• Develop and maintain the Group Compliance Framework and monitor adherence to corporate policies, governance requirements, delegated authorities, and regulatory obligations.

• Oversee policy management, compliance reviews, whistleblowing, ethics, conflict-of-interest, and compliance-monitoring programs, and liaise with external advisors, regulators, and auditors as required.

• Review project risk registers and support project teams in identifying, monitoring, and escalating schedule, cost, contractual, operational, and commercial risks.

• Develop executive risk dashboards, KPIs, and KRIs, and produce monthly and quarterly reports covering key risks, control effectiveness, compliance breaches, and mitigation progress.

• Present findings and recommendations to Executive Management and Board Committees and act as the Group focal point for enterprise risk management.

QUALIFICATION REQUIREMENTS:

Bachelor's degree in Finance, Accounting, or a related field.
10-15 years of experience, including 7+ years in risk, controls, compliance, or governance within diversified groups, with senior stakeholder exposure.
Master's degree or MBA preferred.
Experience in EPC, construction, infrastructure, energy, major projects, and GCC markets, especially Saudi Arabia.
Professional certificates: CRMA, CIA, CISA, CFE, ISO 31000, or COSO certification.
PMP or a relevant GRC certification preferred.

Loading description...

Skills Gap Analyzer

Compare your skills with the requirements for Group Risk, Compliance & Control Manager and see what you need to learn

About the company

Algihaz Holding

Holding Companies