Risk Officer

Remitly

You Will:

• 1. Enterprise Risk Management
  • Develop, implement and continuously improve the Enterprise Risk Management Framework in line with CBUAE Exchange Business and Stored Value Regulations, Risk Management Standards and industry frameworks.
  • Drive risk identification and assessment activities across strategic, financial, compliance, and operational areas, ensuring comprehensive coverage of all business units.
  • Maintain and periodically update the risk register, ensuring clear ownership, effective control documentation and timely implementation of agreed mitigation plans.
  • Oversee management of Operational Risk Incidents by ensuring:
  • Maintain an operational incidents register to record and investigate the operational risk incidents and near misses.
  • Implement and track the action plans.
  • Escalate material incidents as appropriate
  • Support Operational Resiliency within the ERM framework by providing inputs for Business Impact Analyses (BIA), supporting the development, Business Continuity testing and maintenance of Business Continuity Plans to ensure alignment with CBUAE operational resilience standards.
  • Define and monitor enterprise-level Key Risk Indicators (KRIs) and risk appetite metrics for continuous oversight.
  • Lead and coordinate thematic and regulatory-driven risk assessments across the organization to address evolving regulatory expectations and business priorities, including but not limited to:
  • Entity-Wide Risk Assessment (EWRA): Conduct periodic EWRA covering AML/CFT/PF obligations as per CBUAE AML/CFT Guidance for Licensed Financial Institutions, ensuring identification, assessment and mitigation of money laundering, terrorist financing and proliferation financing risks.
  • Conduct Risk Assessments: Assess customer-facing operations and distribution channels to ensure fair treatment of customers, ethical conduct and compliance with CBUAE conduct and consumer protection standards.
  • Outsourcing Risk Assessments: Assess and monitor risks related to outsourced functions in line with CBUAE Outsourcing Regulations, ensuring effective oversight, resilience and service continuity.
  • Third-Party Risk Assessments: Evaluate and monitor risks arising from external vendors, partners, collaborations and technology providers, ensuring appropriate due diligence, ongoing monitoring and BCM alignment.
  • Maintain a central repository of thematic risk assessments to track findings, recommendations and mitigation plans. Present assessment outcomes to senior management and relevant governance committees, ensuring integration of key findings into the ERM framework and risk appetite.
  • Report significant risk exposures or deficiencies identified through thematic reviews to CBUAE and ensure timely rectification of supervisory observations.
  2. Governance, Compliance and Reporting
  • Ensure compliance with CBUAE's Exchange Business and Stored Value Regulations, organization's Corporate Governance guidelines and Operational Risk Management directives.
  • Prepare and present risk dashboards, incident summaries and mitigation status reports to the Executive Management, Governance Committees and the Board of Directors.
  • Coordinate with internal audit, compliance and regulatory authorities during reviews, examinations and inspections.
  • Periodically review and update Risk Management Policies and Procedures to ensure alignment with regulatory and industry requirements.
  • Ensure accurate, timely and transparent communication of the organization's risk profile, mitigation actions and emerging risks as per the prescribed CBUAE templates and supervisory expectations.
  • Coordinate with internal stakeholders to gather information for CBUAE risk-related returns, thematic risk reviews and regulatory inspections.
  • Maintain comprehensive documentation to evidence compliance with regulatory submissions and audit trails for supervisory verification.
  3. Risk Awareness and Culture
  • Promote a risk-aware and resilient culture across the organization through regular awareness sessions, training and communication programs.
  • Provide advisory support to the management on emerging risks, incident escalation, evolving business models.