Director Operational & Enterprise Risk Management

About the role

Alvarez & Marsal is expanding its Operational Risk Management (ORM) and Enterprise Risk Management (ERM) practice in the Middle East and is looking for a Director to lead complex risk engagements across the region. The role will be based in the United Arab Emirates and will combine hands‑on delivery with strategic development of risk frameworks for board‑level reporting.

Key responsibilities

• Lead the execution of large‑scale ORM and ERM projects, from risk taxonomy design to control library implementation.
• Own the creation of integrated risk frameworks that link enterprise‑level principal risks to operational risk registers and key risk indicators.
• Facilitate board and executive risk discussions, including risk appetite setting, emerging‑risk assessment and escalation protocols.
• Provide senior oversight of control testing, loss data analysis, scenario modelling and remediation plans.
• Develop and deliver Safety Culture assessments, HSE system reviews and related training programmes.
• Advise clients on operational resilience, business continuity, third‑party risk and three‑lines‑of‑defence governance.
• Act as quality reviewer for assurance activities, ensuring independence and adherence to professional standards.
• Build and nurture client relationships, identify new business opportunities and contribute to A&M’s brand development in the region.

Required profile

• Bachelor’s or master’s degree in business, finance, engineering or a related field.
• 10 + years of experience in operational and enterprise risk management, internal audit or consulting.
• Proven track record of designing and implementing enterprise‑wide risk frameworks (taxonomy, registers, KRIs, control libraries).
• Deep knowledge of operational risk disciplines such as RCSA, control design, loss data analysis and scenario testing.
• Experience with ISO 31000, ISO 17776 and other operational resilience standards.
• Professional certification in ERM or ISO 31000 is preferred.
• Strong communication, analytical and project‑management skills, with willingness to travel.

Required skills

• Control libraries
• Crisis Management
• Third‑party risk
• Risk registers
• ISO 31000
• Safety Culture assessments
• Business continuity
• ISO 17776
• Risk frameworks
• RCSA
• Control design
• Loss data analysis
• Scenario analysis
• Operational resilience

What we offer

• Robust performance‑development process with continuous learning and merit‑based rewards.
• Top‑notch training, on‑the‑job learning opportunities and access to a global network of experts.
• Well‑being benefits and resources to support personal and professional growth.