About Deloitte<\/h4>\n

When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including Best Employer in the Middle East, Best Consulting Firm, and the Middle East Training & Development Excellence Award.<\/p>\n\n

Our Purpose<\/h4>\n

Deloitte makes an impact that matters. Every day we challenge ourselves to do what matters most\u2014for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges, and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations, and supporting our communities.<\/p>\n\n

Our shared values guide the way we behave to make a positive, enduring impact:<\/p>\n

\n
• Lead the way<\/li>\n
• Serve with integrity<\/li>\n
• Take care of each other<\/li>\n
• Foster inclusion<\/li>\n
• Collaborate for measurable impact<\/li>\n<\/ul>\n\n

  During your tenure as a Manager, you will demonstrate and develop your capabilities in the following areas:<\/h4>\n\n

  1. Framework & Governance:<\/strong><\/p>\n

  \n
  • Update ORM policy: review and enhance alignment with CMA prudential rules (Pillar 2\/3).<\/li>\n
  • Risk taxonomy: standardize risk categories (Fraud, ICT, Process, Legal) and scoring scales (1-5).<\/li>\n<\/ul>\n\n

    2. Risk Assessment (RCSA):<\/strong><\/p>\n

    \n
    • Risk registers: refresh or create registers for all departments.<\/li>\n
    • Workshops: conduct sessions with business owners to identify risks and map existing controls.<\/li>\n
    • Heatmaps: produce visual 5x5 matrices showing inherent vs. residual risk levels.<\/li>\n<\/ul>\n\n

      3. Monitoring & Metrics (KRI\/KCI):<\/strong><\/p>\n

      \n
      • KRI library: establish key risk indicators with specific \"Red\/Amber\/Green\" thresholds.<\/li>\n
      • KCI mapping: define key control indicators to monitor if critical controls are actually working.<\/li>\n<\/ul>\n\n

        4. Incident Management (RCA):<\/strong><\/p>\n

        \n
        • Loss database: build or update a log for tracking operational losses and \"near-misses.\"<\/li>\n
        • Root cause analysis (RCA): provide a methodology to analyze why major failures occurred and how to fix them.<\/li>\n<\/ul>\n\n

          5. Validation (The \"Accuracy\" Check):<\/strong><\/p>\n

          \n
          • Challenge sessions: consultant acts as the second line to \"challenge\" and verify that the risk scores provided by departments are realistic.<\/li>\n
          • Control testing: sample testing to prove that the controls listed in the registers exist and are effective. A consultant should have an IT background.<\/li>\n
          • Back-testing: cross-check the registers against the incident log to ensure all past failures are now captured as risks.<\/li>\n<\/ul>\n\n

            6. Reporting & Training:<\/strong><\/p>\n

            \n
            • Risk reporting: create a concise semi-annual operational risk dashboard for the Risk Committee.<\/li>\n
            • Capacity building: train staff on how to report incidents and update their own registers moving forward.<\/li>\n<\/ul>\n\n

              Leadership Capabilities:<\/h4>\n

              \n
              • Builds own understanding of our purpose and values; explores opportunities for impact.<\/li>\n
              • Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent.<\/li>\n
              • Understands expectations and demonstrates personal accountability for keeping performance on track.<\/li>\n
              • Actively focuses on developing effective communication and relationship-building skills.<\/li>\n
              • Understands how their daily work contributes to the priorities of the team and the business.<\/li>\n<\/ul>\n\n

                Qualifications:<\/h4>\n

                \n
                • Should have experience working with operational risk systems; familiarity with the BenchMatrix Risk Nucleus System would be an added advantage.<\/li>\n
                • We are looking for candidates with 10\u201312 years of relevant experience.<\/li>\n
                • Proficiency in Arabic is mandatory.<\/li>\n<\/ul><\/p>

                  <\/p>