Senior Consultant Enterprise Risk & Fraud Risk Management

Role Purpose: Operate and improve KAHRAMAA s Enterprise Risk Management framework (ISO 31000:2018) and Fraud Risk Management framework (ACFE guidelines) across all directorates, and lead Control Effectiveness Testing.

Key Responsibilities

• Risk Framework Maintenance Annually review the ERM policy, procedures, risk appetite and tolerance statements, risk criteria, registers, and templates against ISO 31000 and OCEG. Maintain the Fraud Risk Management framework and fraud risk assessment methodology in line with ACFE. 2. Risk OperationsFacilitate risk identification and assessment workshops with department focal points across ENA, WNA, TA, Shared Services, and the President s Directorate.Run the monthly risk review cycle; maintain enterprise and departmental risk registers.Manage Key Risk Indicators (KRIs): define, collect, validate, and escalate breaches.Monitor risk treatment plans to closure and flag overdue actions.Conduct periodic fraud risk assessments and support fraud-control improvements. 3. Risk ReportingPrepare monthly, quarterly, and annual ERM reports, heat maps, and KRI dashboards for PQ and the GRC Executive Team .4. Control Effectiveness TestingPlan and perform annual CET of key internal controls linked to eGRC and enterprise risks: test design, sampling, evidence, ratings, and reports.Agree remediation actions with control owners and track them to closure. 5. Audit and MaturitySupport the ERM Unit during ISMS, BCMS, and QMS management-system audits where risk evidence is required.Provide evidence for the annual eGRC audit and lead the risk components of the Year 3 maturity assessment. 6. Training and CertificationDevelop and deliver ERM and fraud-risk training and refreshers; support the Year 3 CFE and PECB Lead Risk Manager certification cohort. 7. GRC TechnologyDefine risk-module requirements (risk registers, KRIs, treatment workflows, CET) and test configuration against the ERM procedures.8. Knowledge TransferCoach Qatari ERM staff to run risk workshops, KRI monitoring, and CET independently.

Education

Mandatory: Graduate Degree Preferred: Finance, Engineering, Risk Management, or Business Certifications:Mandatory: Preferred: Any of ERMCP, OCEG GRCP, IRM IRMP, ISO 31000 Risk Manager (named by KAHRAMAA); CFE or CRMA an advantage

Experience

Mandatory: 3-5 Years of Risk Management SupportPreferred: ERM in Utilities, Energy, or Infrastructure; Control Testing; Fraud Risk Assessments

Skills

Mandatory: Data Analysis; Presentation Skills Preferred: Excel Modelling, Power BI, Risk Quantification; GRC Tool Risk Module Language:Mandatory: English (Fluent) Preferred: Arabic Key Competencies:Analytical rigourWorkshop facilitation with technical and operational staffSound judgement on risk ratingsClear and timely escalation