About the Role

Salla is seeking a Risk Manager for PayLink to lead its Enterprise Risk Management (ERM) function as an independent control function. This full-time role is based in Makkah, Mecca, and involves developing and maintaining the risk management framework, assessing risks across the business, and providing insights to support informed decisions, business resilience, and compliance with Saudi Central Bank (SAMA) requirements. The Risk Manager will work closely with senior management, relevant committees, and departmental risk owners while maintaining independent oversight.

Key Responsibilities

• Develop and update the Enterprise Risk Management (ERM) framework, policies, methodologies, tools, and templates.
• Prepare an annual risk management strategy and work plan aligned with the Company's strategy and operations.
• Define roles, responsibilities, escalation lines, risk owners, and control owners in coordination with relevant departments.
• Lead enterprise assessments of inherent and residual risk, establishing and maintaining the enterprise risk register.
• Coordinate Risk and Control Self-Assessments (RCSA) and assess enterprise risks from new products, services, and material changes.
• Develop and review the risk appetite statement and tolerance limits, along with Key Risk Indicators (KRIs).
• Monitor risk appetite breaches, analyze causes, recommend mitigation, and produce periodic reports for senior management.
• Assess control design adequacy and effectiveness from a risk management perspective.
• Monitor financial, operational, technology, and financial crime risks, including money laundering and terrorist financing risks.
• Oversee the Business Continuity Management (BCM) framework and program, monitoring plans, testing, and remediation readiness.
• Assess risks related to suppliers, outsourcing, third-party dependencies, and projects.
• Monitor regulatory requirements, participate in supervisory visits, and track regulatory and Internal Audit findings.
• Deliver risk awareness and training to risk owners and promote risk culture throughout the Company.

Qualifications and Experience

• Bachelor's degree in Risk Management, Finance, Accounting, Business Administration, or a related discipline; a postgraduate qualification is preferred.
• At least 5-10 years of relevant experience in risk management, governance, or financial services, including leadership experience.
• Practical experience within financial institutions or payment service providers supervised by the Saudi Central Bank (SAMA).
• Working knowledge of Enterprise Risk Management (ERM), Risk and Control Self-Assessments (RCSA), risk appetite, Key Risk Indicators (KRIs), Business Continuity Management (BCM), internal controls, and regulatory reporting.
• Relevant professional credentials such as FRM, CRMP, RIMS-CRMP, or an ISO 31000-related qualification are preferred.

Required Skills

• Strong analytical judgment and independent assessment skills, with the ability to connect risk exposures to business objectives and regulatory impact.
• Effective communication, cross-functional coordination, and professional conflict management skills.
• Ability to prepare clear executive reports and provide practical, actionable recommendations.
• Strong planning and prioritization skills, including tracking remediation activities.
• Ability to evaluate evidence and data while maintaining confidentiality.
• Leadership and coaching skills, with the ability to strengthen risk culture and influence stakeholders without direct line authority.