Ashwag Al Khoraif

Strategic Risk Management Leader with over a decade of experience driving enterprise and operational risk across financial and government sectors. Expert in developing risk frameworks, appetite statements, and governance structures that enable executive decision-making. Experienced in leading GRC functions, ensuring integration of risk management, internal controls, and regulatory compliance across the organization. Recognized for strengthening risk culture and aligning risk strategy with organizational growth

GRC professional

GRC Auditor

Risk Management Auditor ISO31000

Business Continuity Auditor ISO 22301:2019

Information Security Auditor ISO/IEC27001:2013

Project Management Professional -PMI

Cyber Information Security- CISM

Internal Auditor -British Certification INC

• Develop internal and external risk context that provides 360 degree risk assessment.
• Set & implement risk management strategy and annual objectives along with manage & report departmental key performance indicators on regular basis.
• Provide second line monitoring for internal control environment and operational, strategic & enterprise risk levels.
• Assist in identifying and evaluating both of opportunity & threat risk areas across the organizational activities and provide support to mitigate risks & issues.
• Conduct risk & control assessment on initiatives & projects and monitor implementing needed requirements.
• Analysis & Investigate root causes of operational losses and monitor & report potential risks & issues.
• Review & manage logged risks, controls, mitigation plans and key risk indicators for each portfolio.
• Report comprehensive risk status to senior management & relevant committees on regular & ad-hoc basis.
• Run ad hoc requests for analyzing and assessing of emerging or changed risks.
• Review, update & maintain risk management governance documents.
• Conduct company-wide risk workshops in line with the plan & when required.
• Provide awareness sessions to ensure enhancing organizational risk maturity.
• Serve as an internal risk consultant to business units for their activities, operations and documentation.