Job Title: Project Lead – Enterprise GRC (Team Lead)Location: Doha, Qatar - Onsite, Full-TimeDuration: 4 YearsExperience: 7-8 Years in GRC ImplementationDirect Reports: Project Support – Governance, Risk and Compliance (3)
Role PurposeLead the consultant team in sustaining, improving, and auditing KAHRAMAA’s Enterprise GRC framework in line with the OCEG GRC Capability Model. Act as the single point of accountability to PQ / ERM and represent the team at the GRC Executive Team chaired by the President.
Key Responsibilities
- * Engagement Leadership and Planning
Produce the 4-year project plan and schedule within the first month of mobilization, agreed with PQ, including key risks and mitigations.
Plan monthly and weekly activities against the minimum deliverables set by each framework owner.Submit the weekly progress report to PQ / ERM and manage scope, quality, and team performance.
- GRC Design and Methodology
Own the annual review of all GRC framework documents: Enterprise GRC Policy, Governance, ERM, Compliance, BCM, Fraud Risk, and Vendor Management.
Approve new policies, procedures, guidelines, and templates raised by regulatory change, organizational change, or emerging risks.
- Leadership ReportingDesign and present integrated GRC reporting (monthly, quarterly, annual) to the PQ Department and the GRC Executive Team.
Turn risk, compliance, and control data into clear dashboards and decision papers for the President and Directors.
- Audit, Assurance and Maturity
Lead the annual eGRC audit to confirm conformance with OCEG and effective implementation.
Oversee annual Control Effectiveness Testing (CET) of key eGRC and enterprise-risk controls and sign off the reports.
Lead the full eGRC Maturity Assessment in Year 3 against OCEG Learn, Align, Perform, and Review components (last done in 2024).
- Culture, Training and Certification
Set the bi-annual training programme for the GRC Executive Team, Directors, Heads of Section, focal points, and staff, with the ERM Unit.
Approve the annual awareness plan and coordinate Year 3 certification training for about 40 staff (CFE, OCEG GRCP, PECB Lead Risk Manager).
Lead requirements comparison and evaluation of GRC tools; advise on modules, workflows, and integration with ISMS and BCMS (tool procurement is out of scope).
Own the Circular No. (3) of 2025 knowledge transfer plan so Qatari employees can sustain GRC operations after contract end.
EducationQualifications and Experience:
Mandatory: Graduate Degree
Preferred: Master’s in Risk, Governance, Business, or related field
Certifications:Mandatory: OCEG GRCP or GRCA
Preferred: CRMA, CIA, CFE, ISO 31000 Lead Risk Manager, ISO 37301 Lead Implementer
ExperienceMandatory: 7-8 Years of GRC Implementation
Preferred: 10+ Years Total; GCC Government or Utility Clients; Prior OCEG Maturity Assessments
SkillsMandatory: Data Analysis; Presentation Skills; Leadership-level Interaction
Preferred: Programme Management (PMP / PRINCE2); Facilitating Executive Committees
Language:Mandatory: English (Fluent)
Preferred: Arabic
Key CompetenciesExecutive presence and stakeholder managementStructured problem solvingReport writing for board-level audiencesTeam leadership and coachingIntegrity and independence
Skills: training,compliance,grc,risk,executive team,framework,enterprise,leadership,egrc,project
