Senior Associate, Enterprise Risk Services (GRC)

Qualifications
As an Advisory Senior, you will make a significant technical contribution to client engagements and internal projects. Within your role, you will actively establish, maintain, and strengthen internal and external relationships. You'll also identify and escalate potential business opportunities for KPMG within ongoing projects. With a clear focus on anticipating and identifying risks, compliance, and governance issues, you'll escalate issues as appropriate to the Manager/Director. Working closely with colleagues, you will confirm whether the work plan is properly executed, documented, and concluded in compliance with KPMG’s guidelines.

Skills and Attributes

• Working effectively as a team member, sharing responsibility, providing support, maintaining communication, and updating senior team members on progress
• Helping prepare reports and schedules that will be delivered to clients and other parties
• Developing and maintaining productive working relationships with client personnel
• Building strong internal relationships within KPMG and with other services across the organization
• Contribute to performance feedback for staff
• Other cognate duties

To qualify for the role, you must have

• Bachelor's or master’s degree in Finance, Business or other related field
• Industry related certification (e.g., ACCA, ICAEW, CIA, CRMA, CRICS, ACAMS)
• Approximately 2 to 4 years of related work experience
• Related audit or applicable business experience
• Proficiency with MS Office and Power BI
• International business experience preferred
• Knowledge in data analytics would be an advantage
• Demonstrated integrity, values, principles, and work ethic
• Strong analytical, interpersonal and communication skills
• Language proficiency: English and Arabic

Technical attributes

COSO Implementation /Internal Control over Financial Reporting

• Conduct COSO-aligned risk assessments to identify financial reporting and operational risks and pinpoint gaps across the five components and 17 principles.
• Perform process walkthroughs to understand actual practices, validate alignment with policies, and identify control design and implementation gaps.
• Develop ICFR testing programs to assess design and operating effectiveness of key controls.
• Lead client discussions to present gaps, root causes and practical remediation actions.
• Design policies, procedures and control frameworks that establish a robust and balanced internal control environment.
• Identify process and control deficiencies and recommend value-adding, risk-mitigating solutions.
• Prepare clear ICFR reports communicating gaps, risks and improvement recommendations to management and governance stakeholders.
• Support preparation of ICFR documentation and schedules required for management reporting and external audit reliance.

Internal Audit

• Perform risk assessments by analyzing current risks and identifying potential risks that are affecting the company
• Conduct process understanding session with client to gain knowledge of on ground practices, policies and procedure implemented to identify the design gaps, associated risks
• Develop internal audit program containing detailed testing strategies to validate the efficacy implemented controls
• Lead client discussions/presentations for gaps identified along with root causes and provide agile solutions mitigating the risks
• Skill set to develop policies and procedures from scratch highlighting balanced control environment mitigating business risks
• Acumen to identify business deficiencies and recommending value adding solution driving.
• Writing detailed audit reports effectively communicating the gaps, risks, and recommendations
• Helping prepare reports and schedules that will be delivered to clients and other parties

Corporate Governance

• Advise on effective corporate governance structure including roles and responsibilities of the CEO, Board Committee etc.
• Assist in development of Delegation of Authority at corporate level based on the constitutional documents such as Articles of Association, Shareholder Agreement, BOD committee terms of reference, etc.
• Advise on matters to be delegated to the CEO and reserved for BOD/Shareholder matters.
• Assist in drafting terms of reference for BOD Committees, etc.
• Advise on the type of BOD committees to be developed i.e., advisory/decision making
• Ensure full compliance with relevant legislation and regulation pertaining to the corporate governance of the entity
• Assist in managing the preparation and publication of the Annual Corporate Governance Statement, Reports and Accounts, and other annual reports as required. This also includes monitoring and disclosure of Third-Party transactions.
• Assist in the implementation of the governance framework.
• Regular review and maintenance of the Corporate Governance policy.

Enterprise Risk Management

• Conduct enterprise-wide risk assessments to identify strategic, operational, financial and compliance risks, and evaluate their impact on organizational objectives.
• Facilitate process and business unit walkthroughs to understand current practices, validate alignment with policies, and identify risk exposures and control gaps.
• Develop ERM assessment and monitoring tools, including risk registers, heatmaps, scoring criteria and mitigation tracking frameworks.
• Lead stakeholder discussions to present key risks, root causes and prioritized mitigation actions, enabling informed decision-making.
• Design ERM policies, frameworks and procedures that establish a structured and consistent approach to risk identification, assessment, response and reporting.
• Identify control and process weaknesses affecting risk management effectiveness and recommend practical, value-adding mitigation strategies.
• Prepare clear ERM reports and dashboards communicating top risks, trends, mitigation progress and emerging risk insights for leadership and board committees.
• Support preparation of ERM documentation and schedules required for risk committee updates, strategic planning and regulatory reporting.