Operational Risk Advisor

About the role

Cigna Healthcare is hiring an Operational Risk Advisor in Dubai as a regional second-line role supporting the Chief Risk Officer in strengthening operational risk management and operational resilience across the Middle East and Africa. The role leads the implementation of UAE operational risk and resilience regulatory requirements and partners with business and functional leaders across Operations, Technology, Cybersecurity, Business Continuity, Compliance, Legal, Finance, Procurement and Third-Party Management.

Key responsibilities

• Support the design and maintenance of a consistent MEA operational risk framework and lead the UAE implementation roadmap, including milestones, evidence and remediation actions
• Maintain the UAE regulatory obligations register and evidence matrix and promote Three Lines of Defence accountability
• Facilitate risk and control self-assessments, oversee risk registers and monitor risk profiles against risk appetite
• Develop minimum control standards, coordinate incident and loss reporting, and develop and monitor Key Risk Indicators
• Prepare dashboards, committee papers and regulatory reports on risk, controls, incidents, losses and resilience
• Support critical service identification, dependency mapping, scenario testing and business continuity alignment with Technology and Cybersecurity
• Provide second-line oversight of third-party risk across due diligence, onboarding, monitoring and exit planning
• Act as a trusted advisor to the CRO, support regulatory reviews and internal audit, and run risk workshops and training

Required profile

• Bachelor's degree in risk management, finance, business, law, technology or a related field; advanced degree advantageous
• Minimum 7 years of experience in operational risk, enterprise risk, internal controls, operational resilience, business continuity, regulatory change or assurance within insurance or financial services
• Experience across multiple jurisdictions or in a regional, matrixed organisation
• Experience implementing operational risk frameworks and using risk registers, KRIs and senior-management reporting

Required skills

• Preferred certifications such as CRISC, CISA, CISM, CBCP, IRM, FRM or PMP
• Proficiency in Microsoft 365; SharePoint, Power BI, Jira or Visio is advantageous
• Knowledge of outsourcing and third-party risk, ICT and cyber dependencies, and business continuity