Enterprise Risk Management (ERM) Consultant

Job Description: Enterprise Risk Management (ERM) Consultant

Location: Oman

Industry: Steel Manufacturing

Engagement Type: Consultancy

Overview:

We are seeking an experienced consultant to conduct an Enterprise Risk Management (ERM) assessment and framework implementation for an Oman-based steel company. The consultant will be responsible for evaluating the current risk management function, defining the target maturity state, and designing a comprehensive risk management framework aligned with the organizations strategic objectives.

Scope of Work:

1. Establishing the Context:

• Understand and align ERM objectives with the companys overall strategy.
• Define the risk management context within the steel industry.

2. Current State Assessment:

• Conduct an in-depth assessment of the existing risk management function.
• Identify gaps and areas of improvement.

3. Target Maturity Definition:

• Define the desired future state of the risk management function.
• Develop a roadmap to achieve the target maturity level.

4. Risk Management Framework Design & Implementation:

• Develop and implement a structured risk management framework.
• Define and document the Risk Management Committee Charter and Risk Management Policy.
• Assist in defining risk attitude, selecting risk owners and champions, and formulating a risk management plan.

5. Process Documentation:

• Create a detailed procedure manual for risk management processes.

6. Risk Evaluation Model:

• Review and refine risk definitions, scoring, and ranking methodologies.
• Align the evaluation model with industry best practices.

7. Risk Identification, Analysis & Evaluation:

• Conduct risk assessments at the entity and departmental levels.

8. Risk Workshops & Training:

• Conduct risk workshops for various levels of the organization.
• Build awareness and capabilities for risk management.

9. Subject Matter Expertise Engagement:

• Engage experts to advise on risk categories, including:
• Strategy
• IT & Cybersecurity
• Finance & Taxation
• Manufacturing & Operations
• Sales & Market Risks
• ESG & Sustainability Risks
• Economic & Geo-Political Risks
• Physical Security Risks
• Regulatory & Statutory Compliance

10. Risk Register & Key Risk Indicators (KRIs):

• Develop a detailed risk register capturing:
• Risk sources
• Risk events
• Consequences & implications
• Likelihood assessment
• Risk profiling
• Definition of KRIs

Qualifications & Experience:

• 10+ years of experience in risk management, governance, or internal audit.
• Proven experience in implementing ERM frameworks, preferably in manufacturing or steel industries.
• Strong knowledge of international risk management standards (e.g., ISO 31000, COSO ERM).
• Experience in conducting risk assessments and developing mitigation plans.
• Excellent communication and stakeholder management skills.