Manager - Operational & Enterprise Risk Management, UAE

About the role

Alvarez & Marsal is recruiting a Manager for its Operational Risk Management team, based in the Middle East region. The team designs risk frameworks and reporting for boards and strengthens controls, resilience and risk data across the three lines of defense, while offering independent assurance to boards, risk and audit committees, regulators and investors.

Key responsibilities

• Lead end-to-end operational risk and enterprise risk engagements, including framework design, risk assessment, control testing and remediation, while managing quality, budget and timelines.
• Design and embed integrated risk frameworks linking enterprise risks to an operational risk taxonomy, process and control libraries and risk registers.
• Lead top-down enterprise risk identification covering strategic, financial, regulatory, technology and emerging risks.
• Lead safety culture assessments, HSE management system reviews, leadership training and coaching, and other HSE-related engagements.
• Develop risk appetite statements and cascade them into operational tolerances, key risk indicators, thresholds and escalation protocols.
• Facilitate risk and control self-assessment workshops, assess control design and operating effectiveness, and agree remediation plans.
• Strengthen risk governance, second-line oversight and reporting, and deliver assurance including control assurance, thematic reviews and independent assurance on major change programs.
• Present findings to clients and executives, including at risk and audit committee level, and manage, coach and mentor junior team members.
• Build client relationships and contribute to new business proposals and pitches.

Required profile

• Bachelor's or master's degree in business administration, finance, accounting, risk management, engineering or a related field.
• 5+ years of experience in operational and enterprise risk management, internal audit or consulting, in the first or second line.
• Ownership of a risk framework component (taxonomy, registers, appetite, KRIs, control libraries).
• Experience running RCSAs, testing controls, using operational risk event and loss data, and developing risk appetite and board-level reporting.
• Experience with risk and audit committees, regulators and second and third line functions.
• Willingness to travel as required.

Required skills

• Working knowledge of ISO 31000, ISO 17776 and other operational resilience regimes.
• Professional certification such as an ERM or ISO 31000 qualification, held or in progress.
• Strong communication skills and ability to challenge constructively.
• Advantageous: psychosocial safety, process safety, crisis, critical risk and change management experience, and previous consulting experience.