Senior Consultant – Enterprise Risk & Fraud Risk Management

About the role

KAHRAMAA is hiring a Senior Consultant for its Enterprise Risk Management (ERM) and Fraud Risk Management function in Doha, Qatar. The role is onsite and full-time, lasting 4 years, and reports to the GRC Executive Team. It covers maintaining the ERM framework (ISO 31000:2018) and the Fraud Risk Management framework (ACFE guidelines), leading Control Effectiveness Testing, risk reporting and supporting audits.

Key responsibilities

• Review annually the ERM policy, procedures, risk appetite and tolerance statements, risk criteria, registers and templates against ISO 31000 and OCEG
• Maintain the Fraud Risk Management framework and fraud risk assessment methodology in line with ACFE
• Run risk identification and assessment workshops with department focal points, run the monthly risk review cycle and maintain enterprise and departmental risk registers
• Manage Key Risk Indicators (KRIs): define, collect, validate and escalate breaches, and monitor risk treatment plans to closure
• Conduct periodic fraud risk assessments and support fraud-control improvements
• Prepare monthly, quarterly and annual ERM reports, heat maps and KRI dashboards for the GRC Executive Team
• Plan and perform annual Control Effectiveness Testing of key internal controls, agree remediation actions and track them to closure
• Support ERM Unit audits (ISMS, BCMS, QMS) and provide evidence for the annual eGRC audit and the Year 3 maturity assessment
• Deliver ERM and fraud-risk training, support the Year 3 CFE and PECB Lead Risk Manager certification cohort, and coach Qatari ERM staff
• Define risk-module requirements and test configuration against ERM procedures

Required profile

• Graduate degree (preferred: Finance, Engineering, Risk Management or Business)
• 3-5 years of risk management support experience
• Preferred: ERM in utilities, energy or infrastructure, control testing and fraud risk assessments
• Fluent English; Arabic preferred

Required skills

• Data analysis and presentation skills (mandatory)
• Preferred: Excel modelling, Power BI, risk quantification, GRC tool risk module
• Certifications preferred: ERMCP, OCEG GRCP, IRM IRMP, ISO 31000 Risk Manager, CFE or CRMA