Risk Management Analyst

Position Overview & Role Purpose:

Are you an analytical risk and governance professional passionate about safeguarding enterprise infrastructure, financial assets, and digital operations against emerging threats? stc is seeking a detail-oriented Risk Management Analyst to join its corporate risk and compliance division in Riyadh.

In this critical analytical role, you will assist in identifying, evaluating, and mitigating enterprise, operational, financial, and cybersecurity risks across stc Group. Working closely with cross-functional leadership, you will monitor risk metrics, perform vulnerability assessments, support policy compliance audits, and help foster a robust proactive risk-aware culture.

About stc Group:

stc Group is the engine of digital transformation in the Middle East, delivering cutting-edge telecommunications, cloud solutions, financial technology, and digital infrastructure across Saudi Arabia and the region. stc provides a progressive, secure, and world-class work environment committed to professional excellence and regulatory integrity.

Key Responsibilities & Risk Management Duties:

1. Risk Identification, Assessment & Monitoring:

– Conduct regular risk assessments and identify potential vulnerabilities across corporate systems, operational workflows, and strategic business units.

– Monitor Key Risk Indicators (KRIs) and compile detailed analytical reports highlighting emerging risk trends and exposures.

– Collaborate with department heads to evaluate operational, financial, and compliance risks associated with new projects and digital initiatives.

2. Mitigation Strategy & Policy Compliance:

– Support the design and implementation of risk mitigation plans, security controls, and contingency frameworks.

– Ensure corporate adherence to local regulatory frameworks, telecommunications standards, and internal governance guidelines.

– Maintain accurate risk registers, policy documentation, and audit trail logs.

3. Cross-Functional Collaboration & Incident Tracking:

– Coordinate with internal audit, cybersecurity, legal, and operational teams during risk reviews and incident investigations.

– Assist in conducting awareness training programs to educate employees on organizational risk policies and best practices.

– Support senior risk managers in preparing executive-level dashboards and board presentations.

Qualifications, Required Experience & Core Competencies:

– Academic Credentials:

* Bachelor’s Degree in Risk Management, Finance, Business Administration, Information Security, Computer Science, or a related discipline.

– Required Professional Experience:

* Minimum 1 to 3 years of experience in risk management, internal auditing, compliance, or information security within telecommunications, banking, or large enterprise environments.

– Technical Skills & Certifications:

* Familiarity with international risk management frameworks (e.g., ISO 31000, COSO) and regulatory compliance standards.

* Strong analytical skills, attention to detail, and proficiency in data analysis and reporting tools.

* Professional certifications such as CRISC, CISA, or CRM (or active progress toward them) are a strong advantage.

– Core Attributes:

* Professional fluency in written and spoken English is mandatory; professional Arabic fluency is highly advantageous.

* Excellent communication, problem-solving, and stakeholder engagement skills.

Compensation & Benefits Package:

– Competitive, tax-free basic salary aligned with Saudi corporate standards.

– Comprehensive medical and health insurance coverage for employee and dependents.

– Annual paid leave and holiday allowances.

– End-of-service benefits in full accordance with Saudi Labor Law.

– Continuous professional development, certification support, and career growth pathways within stc Group.