Enterprise Risk Manager – GRC (Middle East)

About the role

Deloitte is seeking an experienced Manager to lead end‑to‑end GRC (Governance, Risk & Compliance) programmes across the Middle East. You will work closely with senior client stakeholders such as CROs, CISOs and Heads of Compliance to design, implement and optimise Archer‑based solutions that address operational resilience, business continuity, third‑party risk and regulatory compliance.

Key responsibilities

• Lead full‑lifecycle RSA Archer implementation programmes, including scoping, planning, budgeting, risk/issue management and executive reporting.
• Serve as the primary client contact, managing expectations of senior risk and compliance leaders.
• Define target‑state GRC operating models, solution architectures and multi‑year roadmaps covering ORM, BCM, TPRM, operational resilience, policy, audit and compliance use cases.
• Provide quality‑assurance and design authority over solution designs, configurations and deliverables.
• Manage and mentor teams of 3–10 consultants across multiple geographies.
• Drive business development by identifying opportunities, leading proposals and shaping commercial models.
• Advise clients on regulatory alignment (e.g., SAMA BCM, CBUAE operational resilience, central bank outsourcing rules).
• Contribute to practice development through accelerators, methodologies and thought leadership.

Required profile

• Significant experience designing and implementing BCM programmes and technology aligned to ISO 22301 and regional central‑bank regulations.
• Proven delivery of third‑party risk (TPRM) transformations, including operating models, due‑diligence methodologies and automation.
• Strong understanding of operational resilience frameworks and critical business services.
• Demonstrated ability to lead multi‑disciplinary teams and manage client relationships at senior level.

Required skills

• RSA Archer platform
• ISO 22301 standards
• Business Continuity Management (BCM)
• Third‑Party Risk Management (TPRM)