Manager - ServiceNow Integrated Risk Management | Middle East

About the Company

Join one of the world's largest and most renowned professional service firms, recognized as a Best Employer and Best Consulting Firm in the Middle East. The organization's purpose centers on making a meaningful impact daily through innovative insights and solving complex challenges, fostering sustainable growth, and delivering exceptional value to clients in an inclusive culture.

Role Overview and Responsibilities

• Lead end-to-end ServiceNow Integrated Risk Management (IRM) programs encompassing Risk, Policy & Compliance, Audit, Business Continuity Management (BCM), Third-Party Risk Management (TPRM), and Operational Resilience; oversee all phases from planning, deployment, and realization of value.
• Act as the primary senior delivery liaison for clients, engaging Chief Risk Officers (CROs), Chief Information Security Officers (CISOs), Heads of Compliance, steering committees, and managing escalations.
• Design Governance, Risk & Compliance (GRC) target operating models, develop ServiceNow solution architectures, module rollout plans, and integration approaches with ITSM, CMDB, Security Operations, HR, and vendor intelligence feeds.
• Serve as design authority ensuring high quality and oversight over solution designs, configurations, and client deliverables.
• Lead and manage teams of 3 to 10 consultants across multiple countries, handling utilization, coaching, and performance management.
• Drive business development activities including pipeline generation, proposal creation, presentations, commercial structuring, and collaboration with ServiceNow alliance and sales teams.
• Provide advisory support on aligning ServiceNow IRM deployments with regional regulatory frameworks such as SAMA, NCA, CBUAE, CBE, CBJ, and SBP.
• Develop practice assets such as accelerators, pre-configured regulatory content, delivery methodologies, and thought leadership on resilience and third-party risk management.

Domain Expertise

• Extensive experience in designing and executing BCM programs and technology, including business impact analysis methodologies, continuity and disaster recovery planning, exercising, and crisis management aligned with ISO 22301 and regional BCM circulars.
• Proven leadership in transforming TPRM practices covering risk operating models, tiering, due diligence designs, automated assessments and monitoring, concentration and fourth-party risk management, and compliance with outsourcing regulations.
• Deep knowledge of Operational Resilience regimes, including identifying critical business services, setting impact tolerances, scenario testing, and dependency mapping, and operationalizing these within ServiceNow Operational Risk Management (ORM).
• Ability to consult on integrating BCM, TPRM, and Operational Resilience into a unified risk framework using the ServiceNow platform.

Leadership and Personal Development

• Embody company values and purpose with proactive impact orientation.
• Commit to continuous professional growth, acting as a brand ambassador to attract talent.
• Maintain accountability for achieving performance goals.
• Enhance communication and relationship-building capabilities.
• Understand individual contributions to team and organizational priorities.

Qualifications

• Bachelor's degree is mandatory; a Master's such as MBA or MSc in Risk, Information Security, or related fields is advantageous.
• Relevant certifications including MBCI/CBCP, CTPRP/CTPRA, CRISC, CISA, PMP, or ISO 22301/27001 Lead Implementer are highly valued.
• Background from Big 4 firms, top-tier consulting, or ServiceNow partner delivery organizations preferred.
• Between 8 to 12 years of professional experience with a minimum of 5 years using ServiceNow platform, 3+ years specialized in GRC/IRM, and at least 2 years in a managerial role.
• Proven record leading 3 to 5 full-lifecycle ServiceNow IRM implementations, including BCM and TPRM modules.
• Strong expertise in platform architecture, licensing, instance strategy, upgrade management, IntegrationHub, and Performance Analytics.
• ServiceNow Certified System Administrator is required; CIS-Risk & Compliance and CIS-TPRM are strongly preferred; ITIL and Agile/Scrum qualifications are beneficial.
• Familiarity with alternative GRC platforms such as Archer, MetricStream, and Diligent is advantageous.
• Understanding of regional regulations including SAMA Cyber Security Framework, NCA ECC (KSA), CBUAE, Central Bank of Egypt, Central Bank of Jordan, State Bank of Pakistan, and SECP guidelines.
• Knowledge of GCC central banks' operational resilience and outsourcing/third-party risk regulations.
• Experience delivering projects in the Middle East, North Africa, or South Asia regions is strongly preferred.
• Proficiency in English is essential; Arabic language skills offer a competitive advantage for roles based in UAE, KSA, Egypt, and Jordan.