Risk & BCM Director
Riyadh University of Arts جامعة الرياض للفنون · Riyadh, Saudi Arabia
Apply & track with Apply EdgeAbout RUARUA is a forward-thinking institution for cross-cultural arts education and creative innovation in the Middle East that fosters bold ideas that inspire progress and transform society by cultivating industry and academic collaboration and rethinking creative education, all while creating a space for global ideas to flourish in a culturally inspiring environment.Our VisionTo be an inspiring beacon of knowledge for future generations, integrating culture and arts, empowering students to discover passions and develop talents while fostering creativity and cultural exchange.Our MissionTo cultivate an innovative educational environment in culture and arts, delivering cutting-edge programs that foster cultural and artistic engagement, enriching both the Saudi and global communities.Our AspirationsThe leading cultural university across the Middle East and North Africa.Ranked among top 50 universities worldwide specializing in cultural education.A global hub for cultural education and knowledge exchange.Job SummaryLeads enterprise risk management, business continuity, and compliance agenda by setting frameworks, and oversight mechanisms that protect institutional objectives, strengthen resilience, and ensure transparent adherence to regulatory and internal requirements. Oversees enterprise risk governance, continuity readiness, crisis preparedness, policy discipline, and integrated assurance across the institution, while providing leadership with clear reporting on risks, breaches, remediation, and decisions required.General AccountabilitiesStrategy and PlanningOversee the design and implementation of Risk & Compliance department’s strategic plan, objectives, and goals ensuring alignment with RUA's strategy.Direct and approve the department’s operational plans and oversee implementation securing achievement of identified objectives.Develop the department’s performance objectives and indicators and continuously monitor progress towards realization of objectives.Budget ManagementParticipate in GRC's budgeting process and provide input from Risk & Compliance standpoint.Ensure effective utilization of the department’s budget and report accurately on progress made and challenges encountered.Policies, Processes, and ProceduresOversee the design and set up of Risk and Compliance department’s policies, processes and procedures to align with and exceed best-in class standards.Oversee the implementation of procedures and controls to ensure efficiency, transparency and accountability across all business areas within the function.Oversee regular reviews of policies, processes, guidelines, and procedures to confirm alignment with RUA requirements and market developments, and coordinate corrective actions where needed.People ManagementInspire the team and provide guidance, delegation and mentorship to create a performance-driven culture.Ensure availability and qualification of team through recruitment, training, development and performance management.Take actions to enhance employee engagement and motivation.Provide clear top-down communication to employees and bottom-up feedback to senior management.Job Specific AccountabilitiesEnterprise Risk GovernanceOversee formulation and maintenance of the enterprise risk framework, including risk appetite, taxonomy, escalation thresholds, reporting cadence, and leadership governance.Oversee the enterprise risk portfolio to ensure risks are identified, prioritized, owned, and managed across strategic, reputational, regulatory, academic, student safety, research, third-party, operational, and financial domains.Monitor key risk indicators and recommend timely actions when thresholds are breached or risk exposure changes.Ensure material risk remediation is assigned, tracked, and escalated for overdue or high-impact items.Business Continuity, Crisis, and ResilienceOversee business continuity management so that critical functions have defined continuity expectations and validated recovery arrangements.Direct business impact analyses, continuity plans, disaster recovery arrangements, and crisis response exercises.Ensure lessons learned from incidents and tests are translated into improvements in controls, plans, and readiness.Direct enterprise BCM governance and reporting across internal stakeholders and continuity partners.Compliance, Policy Governance, and AssuranceOversee the compliance management approach, and ensure regulatory obligations are captured, translated into operational requirements, and monitored through structured reporting.Ensure policy governance standards, centralized policy repository controls, and disciplined review cycles are applied consistently.Coordinate integrated assurance across Risk, Compliance and relevant functions to reduce duplication and strengthen transparency.Ensure consolidated dashboards and decision-focused reports are developed for leadership and governance bodies, highlighting risks, breaches, incidents, and decisions required.Stakeholder InterfacesEngage with internal and external stakeholders to support risk treatment, continuity planning, preparedness, assurance, and compliance remediation.Knowledge & Experience8+ years of progressive experience in enterprise risk management, compliance, business continuity, resilience, governance, or a related field, including at least 4 years in a managerial roleStrong knowledge of enterprise risk frameworks, risk appetite, taxonomies, escalation practicesEducation & CertificationsBachelor degree in risk management, business administration, finance, public administration law, or related disciplineMaster degree in risk management, business administration, public administration, law, or a related field is preferredInternal StakeholdersVP, Legal & GRCLegalRisk and BCMComplianceGovernanceCybersecurityFacilitiesInternal AuditAcademic and Non-Academic LeadershipExternal StakeholdersRegulatory and Government Authorities Relevant to Higher Education, Compliance, and Emergency PreparednessCritical Suppliers, Service Providers, and Continuity PartnersEmergency Response and Civil Defense AgenciesInsurance and Risk Advisory PartnersWhy joining RUA:RUA represents a platform for discovery, a space where talent is nurtured, and a gateway for Saudi art and culture to the world. We welcome you to join us on this exceptional journey. Together, we will shape the ambitious cultural future of the Kingdom and inspire the world.As the first of its kind in the MENA region, RUA serves as a center of creativity, knowledge, and innovation, contributing to shaping the future of Saudi Arabia’s cultural ecosystem and creative economy, driving the growth of Saudi Arabia’s cultural sector in alignment with Saudi Vision 2030.