Compliance&Risk Senior Manager

<div><p><b>Location:</b>Abu Dhabi, United Arab Emirates</p><p><b>Position Type:</b>Full Time</p><p><b>Reporting To:</b>Head of Governance, Risk&Compliance</p><h3>Overview</h3><p>The Senior Manager of Governance, Risk&Compliance leads the design, implementation, and ongoing maintenance of the company’s corporate governance and compliance frameworks across all business units and GCC markets. The role is responsible for establishing robust governance structures — encompassing the GRC Charter, Corporate Governance Framework, Policies and Procedures, Delegation of Authority, Code of Ethics, Committee and Board governance, Internal Control Framework, Risk Management, Business Continuity and Disaster Recovery, Regulatory Compliance, Data Privacy, Insider Trading, and internal training and communications. The position supports the Head of GRC in building a culture of integrity, accountability, and sustained regulatory compliance aligned with UAE, GCC, and ADAA requirements.</p><h3>How Will You Make An Impact?</h3><ul><li>Develop and maintain the GRC Charter, Corporate Governance Framework, and Internal Control Framework, ensuring alignment with Board expectations and regulatory requirements.</li><li>Manage the Policies and Procedures Library, ensuring all documents are current, formally approved, and periodically reviewed across business units.</li><li>Maintain the Delegation of Authority (DoA) Matrix, ensuring authorization levels are clearly defined, enforced, and updated to reflect organizational changes.</li><li>Develop and promote the Code of Ethics, ensuring organization-wide attestation and adherence.</li><li>Support the governance of Board and Committee structures, including: Secretariat functions, Terms of Reference (ToR) maintenance, Agenda coordination, Minutes documentation and records management.</li><li>Ensure governance frameworks comply with:</li></ul><h3>Ensure governance frameworks comply with:</h3><ul><li>UAE Securities and Commodities Authority (SCA) requirements.</li><li>Abu Dhabi Securities Exchange (ADX) disclosure and governance rules.</li><li>Abu Dhabi Accountability Authority (ADAA) requirements.</li><li>Applicable GCC corporate governance regulations.</li><li>International standards including ISO 31000 (Risk Management) and ISO 22301.</li></ul><h3>2. Business Continuity Management</h3><ul><li>Develop, maintain, and regularly test Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).</li><li>Conduct Business Impact Analyses (BIA) to define Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).</li><li>Coordinate BCP and DRP simulation exercises to ensure preparedness across the organization.</li><li>Ensure business continuity planning is integrated across IT, Operations, and key business functions.</li></ul><h3>3. Regulatory Compliance&Data Privacy</h3><ul><li>Maintain and manage the Regulatory Compliance Calendar, ensuring timely identification and fulfilment of regulatory obligations across UAE and GCC jurisdictions.</li><li>Conduct compliance gap assessments, provide remediation recommendations, and track closure of findings.</li><li>Lead the organization's Data Privacy Program aligned with:<ul><li>UAE Personal Data Protection Law (PDPL).</li></ul></li><li>Perform Privacy Impact Assessments (PIA) and manage data breach response protocols.</li><li>Monitor legislative and regulatory developments, assess operational impacts, and maintain regulatory reporting obligations to authorities including ADAA, SCA, and ADX.</li><li>Manage insider trading controls, including monitoring, disclosures, and regulatory announcements.</li></ul><h3>4. Training&Internal Communications</h3><ul><li>Design and deliver GRC training programs covering governance, risk management, compliance, ethics, data privacy, and business continuity for employees at all levels.</li><li>Develop and execute an internal GRC communications strategy to promote awareness and strengthen the organization’s compliance culture.</li><li>Track mandatory training completion and report GRC culture metrics to the Head of GRC and senior leadership.</li><li>Develop awareness materials, e-learning modules, and internal campaigns tailored to diverse employee audiences and geographies.</li></ul><h3>Qualifications, Experience&Skills</h3><ul><li>Bachelor’s degree required; advanced degree in Law, Business, or related field preferred.</li><li>Professional certifications such as CCEP, CGRC, CIPP/E, CIA, or ISO 31000 Lead Risk Manager are advantageous.</li><li>10+ years of experience in governance, risk, compliance, or internal audit, ideally within a listed company or regulated multi-jurisdiction environment.</li><li>Demonstrated experience developing governance frameworks, policies, internal controls, and compliance programs aligned with UAE and GCC regulatory requirements.</li><li>Proven experience in data privacy program management (UAE PDPL), business continuity planning, and preparing governance disclosures for ADAA and