OQ- Expert, Enterprise Risk Management
Listed on 2026-09-13
-
Business
Risk Manager/Analyst, Regulatory Compliance Specialist -
Management
Risk Manager/Analyst, Regulatory Compliance Specialist
Job title
Company
OQ8
FunctionFinance
DepartmentCorporate Planning
SectionBusiness Transformation & Performance Analysis
LocationOman – Muscat
Budget control* OPEX and/or CAPEX and/or Revenue amount as relevant*
Reporting toHead Business Transformation & Performance Analysis
Direct reports-
Job purposeProtect Organizational Value:Safeguarding the company's assets, earnings capacity, and overall business objectives from potential threats and vulnerabilities.
Support Strategic Goals:Aligning risk management activities with the organization's mission and strategic plans, helping leaders make informed decisions that balance risk and reward.
Ensure Compliance:Ensuring the organization adheres to relevant laws, regulations, industry standards, and internal policies to avoid penalties, legal sanctions, and reputational damage.
Improve Operational Efficiency:Developing and implementing robust risk controls and processes to minimize disruptions, improve business continuity, and enhance overall operational effectiveness
- Support leadership in operationalizing company’s risk appetite and tolerance, embedding ERM into strategy-setting, business planning, and decision-making.
- Define consistent risk criteria (likelihood, impact, velocity, resilience) and maintain dynamic risk profiles and a portfolio view that adapts to business changes, digital innovations, and regulatory shifts (ISO & COSO).
- Leading or supporting regular risk assessments to identify potential risks (strategic, financial, operational, compliance, etc.) and evaluating their potential impact and likelihood of occurrence.
- Facilitate the identification of potential risks across the organization and conduct detailed risk assessments
- Guide business areas in designing and executing mitigation and business continuity plans, and validate corrective actions through closure for effectiveness and sustainability
- Collaborating with department heads to develop and implement risk response strategies (avoidance, reduction, sharing, or acceptance) and establish internal controls to manage identified risks effectively.
- Assist in developing and monitoring mitigation strategies and action plans to address identified risks.
- Continuously monitoring key risk indicators (KRIs) and the overall risk environment, preparing comprehensive risk reports and presentations for senior management and the board of directors.
- Monitor internal and external risk indicators, including those specific to behavioral and operational risks.
- Prepare clear, decision-oriented reporting for the ERM Committee, senior leadership, and other stakeholders, leveraging risk registers, analytics, and technology platforms.
- Ensuring that risk management policies, procedures, and frameworks (such as COSO or ISO 31000) are up to date, communicated to stakeholders, and followed consistently across the organization.
- Help establish and maintain an ERM framework, including policies, metrics, and reporting.
- Supporting the development and testing of business continuity and crisis management plans to ensure the organization can respond effectively to major disruptions
- Use quantitative methods to analyze risk data and support decision-making.
- Work with various departments, management, and other assurance providers to coordinate risk management efforts and provide guidance.
- Collaborate across Corporate Compliance, Information Security, Quality, and Legal to align ERM with compliance, continuity, and resilience frameworks, and provide a portfolio-level risk view to support governance and oversight.
- Help ensure compliance with regulatory requirements and implement industry best practices in risk management.
- Bachelor's degree in business administration, risk management, or a related field.
- A master's degree and relevant certifications (e.g., COSO ERM, CRM, PMI-RMP) is preferred.
Competencies and skills
- 10 years of relevant experience in oil and gas industry, progressive experience in risk management.
- Proven success in embedding risk management frameworks into business practices, not just developing them.
- Ability to translate complex risk concepts into actionable strategies that support organizational objectives.
- Familiarity with relevant laws, regulations, and industry standards in risk management, compliance,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).