Risk Officer

Design and enhance an enterprise-wide risk management framework and conduct comprehensive risk assessments.

Act as a risk advisor to the executive team and board.

Identify, mitigate, and manage operational risks.

Collaborate with technology teams to address cybersecurity risks and develop cybersecurity policies.

Manage financial risks including credit, market, and liquidity risk, and oversee stress-testing.

Monitor and manage risks to the company's reputation and develop crisis management strategies.

Establish risk analytics and reporting frameworks and provide regular reports.

Foster risk awareness across the organisation and design risk management training.

Act as Incident Manager for risk, compliance, and operational incidents in the absence of a dedicated Incident Manager, ensuring incidents are identified, logged, triaged, and escalated without delay.

Coordinate immediate incident response, including engagement of relevant stakeholders (Technology, Operations, Legal, Senior Management) and external parties where applicable.

Assess incidents for regulatory notification obligations and ensure any required notifications are made within prescribed timeframes.

Maintain an incident log/register capturing root cause, impact assessment, remediation actions, and lessons learned.

Escalate material incidents to senior management and the Board according to the entity's escalation thresholds and reporting protocols.

Support post-incident review and track remediation actions to closure.

Own and maintain the Risk Appetite Statement (RAS), ensuring it remains current, board-approved, and reflective of the entity's risk-taking capacity and strategic objectives.

Define and maintain documented escalation thresholds across material risk categories, ensuring timely identification of risk appetite breaches.

Establish and maintain breach reporting protocols, reporting any breach of risk appetite thresholds to senior management and, where material, the Board, with detail on cause, impact, and remediation.

Operate independently from business and revenue-generating functions in exercising risk oversight responsibilities.

Comply with conflict-of-interest safeguards, including declaring actual or potential conflicts and recusing from decisions where independence may be compromised.

7+ years' experience in a Risk Management function within financial services.

Previous experience developing risk governance frameworks and overseeing a risk function.

Regulatory understanding of UAE, ADGM, FSRA, and VARA frameworks.

Existing knowledge of developing and managing Risk Governance Frameworks, Enterprise Risk Management, Incident Management, Disaster Recovery, and Business Risk Assessments.

Strong delivery mindset — proactive, detail-oriented, and comfortable operating at pace.

Leadership experience managing teams and influencing senior stakeholders.

Knowledge of digital asset regulation and associated risks, with a strong interest in blockchain technology.

UAE residency eligibility and ability to work regularly from ADGM.

Exceptional communication skills and a reputation for integrity, transparency, and trust.