Title: Manager - Risk Department
.
|
Department / Plant |
GRC |
Section |
Risk Management Department |
|
Grade |
15 |
Last Update |
21st March 2025 |
|
ISO Number |
Y-AAA-06-02 |
||
Job Purpose
Protect the organization from potential threats and ensure its long-term sustainability.
Job Responsibilities
Risk Identification:
1. Identify potential risks that could impact on the organization's financial health, legal compliance, and reputation.
2. Proactively identify, document, and analyze enterprise-wide risks (operational, financial, strategic, compliance, and reputational) specific to Saudi Ceramic’s manufacturing operations, supply chain, and Saudi market dynamics.
3. Focus on sector-specific risks: commodity price volatility (e.g., gas, raw materials), supply chain disruptions, regulatory changes (e.g., Saudi Quality Mark, SASO), cybersecurity threats, and ESG/sustainability exposures.
Risk Assessment & Prioritization
1. Conduct quantitative/qualitative risk assessments using Tadawul/CMA-compliant methodologies (e.g., COSO ERM).
2. Prioritize risks based on financial impact, likelihood, and strategic alignment with Saudi Ceramic’s objectives. Maintain dynamic risk registers for Board reporting.
Enterprise Risk Framework Implementation
1. Develop, implement, and maintain an integrated ERM framework aligned with Saudi Ceramic’s governance structure.
2. Establish risk appetite statements, KRIs, and control standards for Board approval.
Project Management: Manage risk-related projects, including planning, execution, and monitoring.
Compliance: Ensure the organization adheres to all relevant laws, regulations, and internal policies.
Communication: Communicate risk management policies and procedures to all employees.
Crisis Management: Lead the response to any incidents or crises that occur.
Crisis & Business Continuity Management
1. Lead the design and testing of crisis response plans (e.g., production halts, cyber incidents, reputational events).
2. Maintain business continuity plans (BCP) for critical manufacturing operations, ensuring minimal disruption.
Risk Assessment: Prioritize risks based on their potential impact on the organization.
Stakeholder Communication & Reporting
1. Deliver concise risk reports to Audit Committee, Board of Directors, and executive management in line with Tadawul governance standards.
2. Train employees on risk culture, policies, and whistleblowing mechanisms (per Saudi Labor Law).
Cross-Functional Collaboration
1. Partner with Internal Audit, Finance, Legal, and Operations to align risk controls with business processes (e.g., procurement, production, sales).
2. Liaise with external auditors, regulators (CMA), and insurers on risk exposures.
Technology & Data Risk Oversight
1. Address digitalization risks and ensure compliance with NCA cybersecurity regulations.
2. Oversee data integrity and protection per Saudi Personal Data Protection Law (PDPL).
Education
Experience
-
Minimum ten years of experience as a manager.
Language
-
Fluency in Arabic and English.
Skills
- Financial acumen
- Data analysis
- Risk management
- Problem-Solving
- Strategic thinking
- Technical proficiency
- Interpersonal skills
Competencies