Risk Officer Director – ETIC

About the role

PwC's ETIC, its acceleration and delivery centre for shareholder firms across the region, is looking for a Director of Risk. The role leads and acts as the primary custodian of ETIC's risk management framework and governance, overseeing Enterprise Risk Management, Business Continuity Management, Business Resilience, Network Information Security, Data Privacy and Ethics & Compliance oversight in coordination with the PwC Middle East firm. It sets and operates ETIC's risk appetite, advises leadership on material risk trade-offs and drives mitigation and remediation.

Key responsibilities

• Maintain ETIC's enterprise risk register, risk appetite framework and reporting suite, and work with business and delivery functions to identify, own and monitor risks
• Lead the Business Continuity Plan, Disaster Recovery Plan, resilience programme, crisis management and incident response governance
• Oversee Network Information Security, cyber risk, information security policies and awareness, working with the NIS/CISO lead
• Oversee the data privacy framework, working with the DPO and embedding privacy-by-design
• Provide oversight of Ethics & Compliance activities and coordinate with shareholder firms on compliance matters
• Develop risk policies, procedures and governance frameworks, support audits and regulatory reviews, and strengthen internal controls
• Build relationships with leadership, business stakeholders and shareholder firms, mentor direct reports and promote a strong risk culture

Required profile

• 13+ years of relevant experience
• Bachelor's degree in Risk Management, Business Administration, Information Security, Law, Finance or a related field, or equivalent professional or academic qualification
• Bilingual Arabic-English (strong English)
• Preferred: experience in enterprise risk, business continuity, cybersecurity governance, data privacy or compliance in professional services, a multinational or regulated environment
• Preferred certifications: CRISC, CISM, CISSP, ISO 22301, ISO 27001, GDPR/Data Privacy