About the job

About HuruHuru is a regulated fintech company licensed by the Central Bank of the UAE, building financial solutions that make banking and payments simpler, faster, and more accessible. We are on a mission to serve the underbanked workforce through innovative payment products, payroll solutions, remittances, and embedded financial services.

About the role:As we continue to scale, we're looking for a Risk Manager to establish and strengthen Huru's Enterprise Risk Management framework while providing independent oversight across operational, technology, resilience, third-party, and strategic risks. This role will play a critical part in ensuring the business grows safely, remains resilient, and continues to meet the regulatory expectations of the Central Bank of the UAE.

• Key ResponsibilitiesEstablish and maintain the Enterprise Risk Management (ERM) Framework, including risk taxonomy, risk appetite, risk registers, risk ownership, control assessments, KRIs, and remediation tracking.
• Lead the annual Enterprise-Wide Risk Assessment (EWRA) and ensure material risks are identified, assessed, monitored, and reported.
• Provide independent second-line oversight and challenge to business functions on risk assessments, control effectiveness, and remediation plans.
• Develop and maintain Operational Risk Management frameworks, including RCSAs, operational risk assessments, incident management, and loss event reporting.
• Coordinate the Operational Resilience Framework, including identification of critical business functions, impact tolerances, dependency mapping, resilience testing, and self-assessments.
• Oversee risk assessments relating to technology, ICT, cybersecurity, cloud services, third-party vendors, outsourcing arrangements, and operational resilience.
• Establish governance for new products, material business changes, outsourcing arrangements, and major technology initiatives, ensuring appropriate cross-functional risk assessments are completed before implementation.
• Monitor operational incidents, near misses, customer-impacting events, technology failures, fraud events, and regulatory issues to ensure timely root cause analysis, corrective actions, and closure.
• Develop enterprise-wide risk dashboards and prepare regular risk reporting for Senior Management, Executive Management, and the Board.
• Monitor Key Risk Indicators (KRIs), emerging risks, risk appetite breaches, and overdue remediation actions.
• Support Board Risk Committee and Governance Committee meetings through risk reporting, documentation, and action tracking.
• Partner closely with Compliance, Product, Technology, Operations, Finance, Information Security, and Internal Audit to embed effective risk management across the organization.
• Support regulatory inspections, internal audits, external audits, and CBUAE examinations relating to Enterprise Risk Management and Operational Resilience.
• Promote a strong risk culture across the organization through awareness, governance, and continuous improvement initiatives.
• Ensure risk frameworks remain aligned with applicable CBUAE regulations, industry best practices, and the Company's evolving business model.

• Preferred QualificationsBachelor's degree in Risk Management, Finance, Business, Accounting, Engineering, Information Systems, or a related discipline. A Master's degree is an advantage.
• 6–10+ years of experience in Enterprise Risk Management, Operational Risk, Operational Resilience, or Risk Governance within banking, fintech, payments, or other regulated financial institutions.
• Demonstrated experience designing and implementing Enterprise Risk Management frameworks, rather than only maintaining existing processes.
• Strong understanding of Enterprise-Wide Risk Assessments (EWRA), Risk Appetite Frameworks, Risk Registers, KRIs, RCSAs, and Board reporting.
• Experience with Operational Resilience, Business Continuity, Incident Management, Third-Party Risk, and Technology Risk.
• Strong understanding of the Three Lines of Defence model and second-line risk responsibilities.
• Ability to independently challenge senior stakeholders while maintaining strong business partnerships.
• Experience working within CBUAE-regulated entities or similar financial regulatory environments is highly preferred.
• Knowledge of technology, cyber, cloud, outsourcing, and operational resilience risks is highly desirable.
• Professional certifications such as FRM, CRISC, CISA, CRMA, ISO 31000, ISO 22301, ISO 27001, or equivalent are advantageous.

• What We're Looking ForWe are not simply looking for someone who maintains risk registers and prepares reports. We're looking for someone who continually asks:Where are our biggest risks before they become incidents?
• How do we strengthen our controls while enabling business growth?
• How do we build a resilient organization that can continue serving customers during disruption?

The ideal candidate is someone who can balance effective governance with business agility, while building scalable risk frameworks that support a fast-growing fintech.

If you've successfully built Enterprise Risk Management frameworks, challenged business decisions constructively, and helped organizations scale safely within a regulated environment, we'd love to speak with you.