GRC Manager – Governance, Risk & Compliance (Project-Based)

About the role

We are looking for an experienced GRC Manager to join a manufacturing client in Doha on a short‑term, project‑based basis. The role will strengthen governance, enterprise risk management, compliance, operational resilience and internal control frameworks.

Key responsibilities

• Develop and enhance governance frameworks, policies, Terms of Reference and Delegation of Authority structures.
• Support enterprise risk management, maintain risk registers and taxonomy, and lead risk workshops and KRIs monitoring.
• Lead operational risk activities including RCSA, scenario analysis and control reviews.
• Drive BCM initiatives aligned with ISO 22301, including BIA, BCP, DR and resilience testing.
• Conduct third‑party, cyber, IT, ESG and climate risk assessments.
• Assist internal audit planning, fieldwork execution, control testing and remediation tracking.
• Perform root‑cause analysis, audit reporting and fraud/fin‑crime assessments.
• Evaluate Three Lines of Defence effectiveness and support crisis simulations.

Required profile

• Bachelor’s degree in Risk Management, Finance, Business, Accounting, Information Security or related field.
• Strong hands‑on experience in GRC, ERM, internal audit, compliance or operational risk, preferably in the manufacturing sector.
• Familiarity with ISO 22301, NIST, FATF and governance best practices.
• Relevant certifications such as CIA, CRMA, CISA, CAMS, FRM or ISO 22301 are a plus.
• Based in Doha and available for immediate short‑term engagement.

Required skills

• ISO 22301
• NIST framework
• FATF standards
• Risk register management
• Key Risk Indicators (KRIs)
• Risk Control Self‑Assessment (RCSA)
• Business Impact Analysis (BIA)
• Business Continuity Planning (BCP) and Disaster Recovery (DR)
• ESG and climate risk assessment
• Third‑party risk assessment
• Cyber and IT risk assessment