Location
Amman, Cairo, Jeddah, Riyadh
About Deloitte: When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including Best Employer in the Middle East, and Best Consulting Firm, and the Middle East Training & Development Excellence Award.
Our Purpose
Deloitte makes an impact that matters. Every day we challenge ourselves to do what matters most—for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations and supporting our communities.
Our shared values guide the way we behave to make a positive, enduring impact:
• Lead the way
• Serve with integrity
• Take care of each other
• Foster inclusion
• Collaborate for measurable impact
During your tenure as a Manager, you will demonstrate and develop your capabilities in the following areas
• Lead full-lifecycle ServiceNow IRM programmes covering Risk, Policy & Compliance, Audit, BCM, TPRM, and Operational Resilience — from scoping and planning through deployment and value realization.
• Serve as the senior delivery contact for clients, managing CRO/CISO/Head of Compliance stakeholders, steering committees, and escalations.
• Define GRC target operating models, ServiceNow solution architectures, module rollout roadmaps, and integration strategies (ITSM, CMDB, SecOps, HR, vendor-intelligence feeds).
• Provide design authority and quality assurance over solution designs, configurations, and all client-facing deliverables.
• Manage and develop teams of 3–10 consultants across multiple countries; own utilization, coaching, and performance management.
• Drive business development: pipeline generation, proposals, orals, commercial structuring, and collaboration with ServiceNow alliance and sales teams.
• Advise clients on aligning ServiceNow IRM implementations with regional regulations (e.g., SAMA, NCA, CBUAE, CBE, CBJ, SBP) and international standards.
• Build practice assets: accelerators, pre-configured regulatory content, delivery methodologies, and thought leadership on resilience and third-party risk.
GRC Domain Experience (BCM, TPRM & Operational Resilience)
• Substantial experience designing and delivering BCM programmes and technology: BIA methodologies, continuity/DR planning, exercising regimes, and crisis management aligned to ISO 22301 and regional central bank BCM circulars.
• Proven leadership of TPRM transformations: third-party risk operating models, tiering and due-diligence design, assessment and monitoring automation, concentration and fourth-party risk, and regulatory outsourcing compliance.
• Deep understanding of Operational Resilience regimes: identification of critical/important business services, setting impact tolerances, severe-but-plausible scenario testing, and end-to-end dependency mapping — and the ability to operationalize these in ServiceNow ORM.
• Ability to advise clients on converging BCM, TPRM, and operational resilience into a single integrated risk framework on the ServiceNow platform.
Leadership Capabilities:
• Builds own understanding of our purpose and values; explores opportunities for impact.
• Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent.
• Understands expectations and demonstrates personal accountability for keeping performance on track.
• Actively focuses on developing effective communication and relationship-building skills.
• Understands how their daily work contributes to the priorities of the team and the business.
Qualifications:
• Bachelor's degree required; Master's degree (MBA or MSc in Risk, Information Security, or related) is a plus.
• Certifications such as MBCI/CBCP, CTPRP/CTPRA, CRISC, CISA, PMP, or ISO 22301/27001 Lead Implementer are highly desirable.
• Prior experience in Big 4, top-tier consulting, or a ServiceNow partner delivery organization strongly preferred.
• 8–12 years of total experience, including 5+ years on the ServiceNow platform with 3+ years focused on GRC/IRM, and 2+ years managing engagements or teams.
• Track record of leading at least 3–5 full-lifecycle ServiceNow IRM implementations, including BCM and/or TPRM modules.
• Strong platform command: architecture, licensing/SKU constructs, instance strategy, upgrade management, IntegrationHub, and Performance Analytics.
• ServiceNow CSA required; CIS-Risk & Compliance and CIS-TPRM strongly preferred; ITIL and Agile/Scrum credentials are a plus.
• Familiarity with adjacent platforms (Archer, MetricStream, Diligent) and the broader GRC tooling market is an advantage.
• Understanding of regional regulatory landscapes, including SAMA Cyber Security Framework and BCM requirements, NCA ECC (KSA), CBUAE regulations and NESA/SIA (UAE), Central Bank of Egypt directives, Central Bank of Jordan regulations, and State Bank of Pakistan / SECP guidelines.
• Familiarity with regional operational resilience and outsourcing/third-party regulations issued by GCC central banks and financial regulators.
• Experience delivering projects in the Middle East, North Africa, or South Asia is strongly preferred.
• Fluency in English is required; Arabic language skills are a strong advantage for UAE, KSA, Egypt, and Jordan-based roles.