Manager – Enterprise Risk & GRC (Middle East)

About the role

Deloitte is seeking a Manager to lead Enterprise Risk and Governance, Risk and Compliance (GRC) programmes across the Middle East. The role will focus on delivering end‑to‑end RSA Archer implementations and advising clients on regulatory alignment.

Key responsibilities

• Lead full‑lifecycle Archer implementation programmes, including scoping, planning, budgeting, risk/issue management and executive reporting.
• Serve as the primary client contact for CROs, CISOs, Heads of Compliance and programme sponsors.
• Define target‑state GRC operating models, solution architectures and multi‑year roadmaps covering ORM, BCM, TPRM, Operational Resilience, Policy, Audit and Compliance.
• Provide quality assurance and design authority over solution designs, configurations and deliverables.
• Manage and coach teams of 3–10 consultants across multiple geographies.
• Drive business development by identifying opportunities, leading proposals and building relationships with Archer alliance teams.
• Advise clients on regulatory requirements such as SAMA BCM, CBUAE operational resilience and central‑bank outsourcing rules.
• Contribute to practice development through accelerators, methodologies and internal training.

Required profile

• Extensive experience designing and implementing Business Continuity Management programmes aligned to ISO 22301 and regional central‑bank regulations.
• Proven delivery of Third‑Party Risk Management transformations, including risk operating models, due‑diligence automation and continuous monitoring.
• Strong understanding of Operational Resilience frameworks and critical business service impact tolerance.
• Demonstrated ability to lead multi‑disciplinary teams and manage client relationships at senior executive level.

Required skills

• RSA Archer platform
• ISO 22301 standards
• Business Impact Analysis (BIA) methodology
• Business Continuity Management (BCM)
• Third‑Party Risk Management (TPRM)