Risk and Change Governance Manager

Position Overview

We are seeking a strategic Risk and Change Governance Manager to join our team in Riyadh. This role will be responsible for establishing and maintaining robust risk management frameworks governance structures and change control processes across our portfolio. The successful candidate will ensure organizational resilience compliance and effective management of risks while facilitating controlled change implementation aligned with business objectives.

Key Responsibilities

Risk Management

• Develop implement and maintain comprehensive enterprise risk management (ERM) frameworks aligned with ISO 31000 and industry best practices
• Identify assess and evaluate strategic operational financial and reputational risks across projects and business operations
• Establish risk assessment methodologies risk registers and risk rating criteria
• Facilitate risk workshops and assessments with project teams and senior management
• Monitor and report on key risk indicators (KRIs) and risk exposure levels
• Develop risk mitigation strategies contingency plans and risk response actions
• Coordinate risk management activities across multiple projects and departments

Governance Framework

• Design and implement governance structures policies and procedures to ensure organizational compliance and accountability
• Establish governance committees terms of reference and decision-making frameworks
• Ensure adherence to corporate governance standards regulatory requirements and industry regulations
• Develop and maintain governance documentation including charters policies and standard operating procedures
• Monitor governance compliance and conduct periodic governance audits and assessments
• Advise senior management on governance best practices and improvement opportunities

Change Management and Control

• Establish and maintain change control processes and change management frameworks
• Review assess and approve change requests in accordance with established protocols
• Evaluate the impact of proposed changes on scope schedule cost quality and risk
• Facilitate Change Control Board (CCB) meetings and document decisions
• Ensure proper documentation tracking and reporting of all changes
• Monitor change implementation and verify closure of approved changes
• Analyze trends in change requests to identify systemic issues

Compliance and Assurance

• Ensure compliance with Saudi Arabian regulatory requirements international standards and contractual obligations
• Coordinate internal and external audits related to risk and governance
• Implement corrective and preventive actions to address compliance gaps
• Maintain compliance registers and track regulatory obligations
• Liaise with regulatory authorities auditors and compliance teams

Reporting and Analysis

• Prepare comprehensive risk reports governance dashboards and change management reports for executive leadership
• Present risk profiles heat maps and trend analysis to stakeholders
• Develop KPIs and metrics to measure effectiveness of risk and governance programs
• Provide regular updates on risk exposure governance compliance and change status
• Generate ad-hoc reports and analysis as required by management

Stakeholder Engagement

• Collaborate with project managers department heads and senior leadership on risk and governance matters
• Facilitate communication between stakeholders on risk governance and change issues
• Conduct training and awareness sessions on risk management governance and change control
• Build risk and governance culture across the organization
• Interface with clients partners and external stakeholders on governance requirements

Strategic Advisory

• Provide strategic advice to leadership on risk appetite tolerance levels and governance structures
• Support strategic decision-making through risk-informed analysis and recommendations
• Identify opportunities for process improvement and operational efficiency
• Contribute to business planning and strategy development from risk and governance perspectives

Required Qualifications

Education

• Bachelors degree in Business Administration Risk Management Finance Engineering or related field
• Professional certifications such as PMI-RMP (Risk Management Professional) CRM (Certified Risk Manager) or ISO 31000 Risk Management certification preferred

Experience

• Minimum 8-10 years of progressive experience in risk management governance and change control
• At least 3-5 years in a managerial or leadership role
• Proven experience in developing and implementing risk and governance frameworks
• Experience in the Saudi Arabian market or Middle East region preferred
• Background in construction real estate infrastructure or consulting industries is advantageous

Technical Knowledge

• Deep understanding of enterprise risk management principles and methodologies
• Strong knowledge of governance frameworks (COSO ISO standards COBIT)
• Expertise in change management processes and change control procedures
• Familiarity with Saudi Arabian regulatory environment and compliance requirements
• Understanding of project management principles and contract administration
• Knowledge of business continuity and crisis management practices

Skills and Competencies

• Excellent analytical and critical thinking skills
• Strong problem-solving abilities with attention to detail
• Outstanding written and verbal communication skills in English (Arabic proficiency is highly desirable)
• Advanced proficiency in MS Office Suite (Excel PowerPoint Word)
• Experience with risk management software and governance tools
• Ability to influence and engage stakeholders at all organizational levels
• Strong presentation and facilitation skills

Preferred Qualifications

• Bachelors degree in Risk Management Business Administration or related field
• Additional certifications: PMP Prince2 CGEIT CIA or similar
• Experience with mega-projects or large-scale developments in Saudi Arabia
• Knowledge of Vision 2030 initiatives and Saudi regulatory landscape
• Familiarity with digital transformation and technology risk management
• Experience with GRC (Governance Risk and Compliance) platforms

Key Competencies

• Strategic thinking and business acumen
• Leadership and team collaboration
• Integrity and ethical judgment
• Adaptability and resilience
• Results-driven with commitment to excellence
• Proactive and forward-thinking approach
• Strong stakeholder management capabilities
• Cultural awareness and sensitivity