Head of Internal Control & Resilience Group Operations
Mashreq Corporate & Investment Banking Group · Posted 2026-04-17
The role of Internal Controls & Resilience, Group Operations is responsible for leading and strengthening internal control, governance, risk, and assurance framework across Group Operations. The role acts as a 1.5 Line of Defense, serving as a strategic conduit between first-line operations and second/third-line functions (Risk, Compliance, Finance, Audit), ensuring robust control design, effective execution, and continuous improvement in the operational risk landscape.The role is accountable for driving enterprise-grade governance, control assurance, and risk management practices, including proactive identification of control gaps, systemic risk mitigation, and embedding a strong risk-aware culture across operations.In addition to core GRC responsibilities, the role has evolved to include:Enterprise Governance Leadership: Structuring and operationalizing the Operations Group Risk Management Forum (OGRM), enabling data-driven risk discussions, thematic insights, and escalation into enterprise forums such as Operational Risk & Resiliency Committee (ORRC).Control Transformation & Integration: Active role in cross-functional initiatives such as Identity & Access Management (IAM) and Role-Based Access Control (RBAC), representing Group Operations, ensuring alignment with enterprise security and regulatory expectations.Operational Risk Event (ORE) Governance: Strengthening end-to-end governance of operational risk events in collaboration with Technology GRC and Risk teams, ensuring high-quality root cause analysis, ownership clarity, and closure discipline.Enterprise Reconciliation Assurance: Providing oversight of reconciliation control effectiveness under the Enterprise Reconciliation Framework (ERF), including direct leadership of the Quality Assurance & Proofing Unit, ensuring independent validation, exception monitoring, and closure governance across all reconciliation types (Nostro / Inter Branch, GL, VAT, internal accounts, etc.).Resilience & Risk Alignment: Representing Operations in enterprise resilience and risk forums, aligning operational risk insights with BCP/BIA, incident management, and systemic resilience priorities.The role requires strong cross-functional leadership, balancing partnership with business units while maintaining independent assurance rigor, ensuring that operational controls are not only compliant but also effective, scalable, and aligned with the bank’s strategic and regulatory objectives. DimensionsGovernance & Risk OversightEnterprise-wide coverage across Group Operations (UAE + IBG locations)Ownership of OGRM governance structure, outputs, and escalation mechanismsActive participation in enterprise risk and resilience forumsControl & Assurance CoverageOversight of GRC reviews, thematic control assessments, and audit action trackingIndependent assurance via QA & Proofing Unit under ERFCoverage across financial and non-financial processesControl Transformation InitiativesLeadership of IAM / RBAC alignment across operationsIntegration of technology, automation, and analytics into control frameworksContinuous improvement of governance and control methodologiesData & ReportingData-driven risk identification and decision-makingDevelopment of dashboards, KPIs, and early warning indicatorsAutomation of GRC reporting and governance outputsReconciliation AssuranceEnterprise-wide proofing coverage (Nostro, Vostro, GL, VAT, internal accounts...)Monitoring of reconciliation SLAs (T+0, T+3, aging thresholds)Exception management governance, thematic analysis, and escalation disciplineOperational Risk GovernanceStandardization of Operational Risk Event (ORE) lifecycleStrengthening root cause analysis and systemic issue identificationIntegration with Technology GRC, Finance and Risk teamsKey Result Areas Comprehensive GRC ReviewsPlan, execute, and report GRC reviews across operations unitsEnsure alignment with enterprise risk frameworks and regulatory expectations Risk Identification & ReportingIdentify, assess, and communicate risks, control gaps, and thematic issuesDrive remediation in collaboration with business and support functions Audit & Regulatory ManagementTranslate audit findings into structured action plansEnsure timely and sustainable closure of audit observations Governance Forum Management Lead structuring and execution of OGRMEnable high-quality risk insights and decision-makingSupport escalation into ORRC / ExCo where required Operational Risk Event (ORE) GovernanceStrengthen end-to-end ORE lifecycle managementEnsure ownership clarity, RCA quality, and closure effectiveness Enterprise Reconciliation Assurance (ERF)Oversee reconciliation control framework across all account typesEnsure adherence to reconciliation policies, timelines, and control standardsDrive reduction in aged and unreconciled items Quality Assurance & Proofing OversightLead and govern the QA & Proofing UnitEnsure independent validation of reconciliation activitiesDrive thematic reviews, exception tracking, and closure governance Identity & Access Management GovernanceLead operations alignment for IAM and RBAC initiativesEnsure compliance with least privilege and access control standards Operating Environment, Framework and Boundaries, Working Relationships Thematic Risk & Control ManagementIdentify systemic control weaknesses and emerging risksDrive cross-functional remediation and continuous improvement Data-Driven GRC & AutomationLeverage analytics to enhance risk insights and control effectivenessDrive automation of reporting and governance processesOperating EnvironmentMulti-country, multi-functional operations environment (UAE, India, Egypt, Pakistan, IBG)High-volume transaction environment across payments, trade, cards, treasury, retail, and corporate bankingStrong regulatory and audit scrutinyFrameworkOperates within enterprise GRC, ERF, and operational resilience frameworksMaintains independence as a 1.5 Line of Defense while partnering with businessWorking RelationshipsInternalGroup Operations leadership and unit headsTechnology, ISG, and Technology GRCFinance (CAD), Risk, ComplianceCentral Reconciliation Unit (CRU)Head of Ops across IBG LocationsExternalInternal and external auditorsRegulatorsExternal consultants and system vendorsProblem SolvingResolve complex and unstructured control issues across operations, technology, and financeAddress systemic and thematic risks through data-driven insightsBridge ownership gaps across functions and ensure accountabilityDiagnose control failures and recommend scalable, sustainable solutionsBalance control rigor with operational efficiency in a high-risk, high-volume environmentDecision Making Authority & ResponsibilityAuthority to recommend and enforce control frameworks across operationsEscalate systemic risks and control failures to senior governance forumsChallenge risk acceptance decisions and inadequate remediation actionsApprove GRC methodologies, QA frameworks, and governance standardsRecommend process and technology changes to mitigate operational riskOversee reconciliation assurance and approve proofing outcomesKnowledge, Skills And ExperienceKnowledgeGRC frameworks, operational risk management, and audit methodologiesEnterprise Reconciliation Frameworks and QA/proofing conceptsIdentity & Access Management and control governanceBanking operations across payments, trade, cards, treasury, and retailSkillsStrong analytical and problem-solving capabilityExcellent stakeholder management and influencing skillsAbility to operate across multiple lines of defenseGovernance structuring and executive communicationData analytics and reporting (Power BI, dashboards, automation tools)Experience20+ years in banking operations, internal controls, risk, or auditProven experience in leading GRC or control assurance functionsExperience managing cross-functional, multi-country teamsExposure to reconciliation, regulatory frameworks, and large-scale transformation initiativesThe leading financial institution in MENAWhile more than half a century old, we proudly think like a challenger, startup, and innovatorin banking and finance, powered by a diverse and dynamic team who put customers first.Together, we pioneer key innovations and developments in banking and financial services.Our mandate? To help customers find their way to Rise Every Day, partnering with them throughthe highs and lows to help them reach their goals and unlock their unique vision of success.Delivering superior service to clients by leading with innovation, treating colleagues with dignity and fairness while pursuing opportunities that grow shareholders value.We actively contribute to the community through responsible banking in our mission to inspire more people to Rise.
About Mashreq Corporate & Investment Banking Group
Banking
Mashreq Corporate & Investment Banking is the corporate banking division of Mashreq Bank, a UAE-based bank with operations across the Middle East, Asia, Europe, and the Americas. The unit provides corporate banking, trade finance, and investment banking services to large corporates and financial institutions.