Manager-Internal Audit & Risk Management- Saudi Nationals

Aljomaih Energy and Water Company (AEW) develops, invests in, owns and operates conventional power generation, renewable power and water desalination assets in the Kingdom of Saudi Arabia and the wider region largely through project-specific special purpose vehicles (SPVs) and joint ventures with domestic and international partners.

The Internal Audit & Risk Management function provides independent and objective assurance and advisory services designed to add value and improve AEW's operations. The function reports functionally to the Board Audit Committee and administratively to the Chief Executive Officer.

This role supports the Head of Internal Audit & Risk Management across corporate functions, project companies and joint venture entities and is expected to operate credibly with senior management, external auditors, regulators, lenders and shareholder representatives.

The Manager, Internal Audit & Risk Management plays a critical role in upholding AEW's ethical, governance and operational integrity. The role plans and executes risk-based internal audits, supports the design and operation of the Enterprise Risk Management (ERM) framework, and advises management on effective risk mitigation and control improvement.

The role requires a proactive mindset, strong analytical and report-writing skills, sound judgement in sensitive situations and a working understanding of the utilities development industry - in particular conventional power, renewable power and water projects and the contractual and financing structures through which they are delivered.

• Plan & Execute:
  Support the Head of Internal Audit & Risk Management in developing the annual risk-based internal audit plan and independently manage and execute internal audits engagement within your assigned area of responsibility
• Evaluate & Improve:
  Conduct comprehensive audits of various business functions, processes and controls, evaluating their effectiveness and identifying areas for improvement
• Compliance & Reporting:
  Assess compliance with relevant laws, regulations and company policies, and prepare clear and concise audit reports that communicate findings, recommendations and remediation plans to senior management and the Board Audit Committee
• Follow-up & Monitoring:
  Monitor and track the implementation of agreed-upon audit recommendations, ensuring timely and effective resolution of identified issues
• Policies and Procedures Review:
  Assist in the review and improvement of company-wide policies, procedures, and management practices

• Audit the project development lifecycle from origination and bid through to financial close, construction, commissioning and handover to operations
• Contract Assurance:
  Review compliance with EPC, O&M, PPA/WPA, shareholder and financing agreements, including obligations, milestones, liquidated damages, warranties, insurance and reporting covenants
• Capex & Claims:
  Verify progress payments, variation orders, claims, change management and contingency utilization against contractual entitlement and approved budgets
• SPV & JV Governance:
  Assess governance, delegation of authority and control arrangements at project companies and joint ventures, including access rights available to AEW under shareholder agreements

• Plan & Execute:
  Support the Head of Internal Audit & Risk Management in developing the annual plan to support, manage and execute risk management engagements within your assigned area of responsibility
• ERM Framework:
  Collaborate with the Head of Internal Audit & Risk Management and senior management to develop, implement & maintain the company's ERM framework, encompassing risk identification, assessment, mitigation and monitoring processes
• Risk Assessment & Mitigation:
  Conduct regular risk assessments to identify and evaluate potential risks facing the company, considering likelihood, impact and cascading effects. Develop and implement effective risk mitigation plans aligned with the overall ERM strategy and internal controls framework
• Risk Communication & Monitoring:
  Maintain an updated risk register and ensure consistent communication of risks to relevant stakeholders. Integrate risk management activities with internal audit processes
• Emerging Risks:
  Analyze emerging risks and trends, proactively adapt the ERM framework and annual plans to address them

• Ensure the smooth and effective…