Hire a Risk Manager in Saudi Arabia: Cost, Visa & Sourcing Guide

The Saudi Market for Risk Managers

Demand for risk managers across the Kingdom has accelerated as Vision 2030 deepens the financial sector and the Saudi Central Bank (SAMA) tightens prudential supervision. Banks are working through Basel implementation and stress-testing expectations, the Capital Market Authority (CMA) is broadening governance and conduct rules for investment firms, and the Public Investment Fund's expanding portfolio has spun up enterprise-risk, investment-risk and operational-risk functions that barely existed a decade ago. Employers in Riyadh, Jeddah and the Eastern Province are competing for professionals who can build risk frameworks, run credit and market risk models, and satisfy regulators that controls are genuinely embedded rather than documented for show.

The candidate pool is broad but uneven in quality. Saudi Arabia hosts a large expatriate finance workforce, with strong supply from India, Pakistan, Egypt, Lebanon and the wider region, alongside a rapidly growing cohort of Saudi national risk professionals that Saudization policy actively pushes employers to develop and hire. Genuinely qualified risk managers with FRM or CFA credentials, regulated-firm experience and a real grasp of SAMA and CMA expectations are far scarcer than raw application numbers suggest, so screening rigour beats reach. Who is hiring? Banks and finance companies, capital-market and asset-management firms, insurers, fintechs scaling under the Saudi regulatory sandbox, PIF and its portfolio companies, and the finance teams of large corporates and giga-projects such as NEOM, Qiddiya and the Red Sea developments. The anti-financial-crime and anti-money-laundering agenda has added a parallel pull on risk and compliance professionals who can stand up AML monitoring and sanctions-screening programmes.

How the Kingdom Differs for This Hire

Finance hiring in the Kingdom is shaped by ZATCA compliance, IFRS reporting and, for capital-market and banking roles, CMA and SAMA approvals. The accounting Saudization decision steps up every October to 2028, so any finance team with five or more people in accounting occupations needs a hiring plan that adds Saudis year by year.

Budgeting the Hire: Salary Bands and Government Fees

What a risk manager earns in the Kingdom, from our salary data:

• Entry level: SAR 10,000–16,000 a month
• Mid level: SAR 16,000–27,000 a month
• Senior: SAR 27,000–40,000 a month
• Lead / head of function: SAR 40,000–62,000 a month

The median in that data set is SAR 21,500 a month. The live market data on this page shows what current postings say.

Government fees for one expat risk manager, per year:

A licensed industrial establishment pays no levy (December 2025 Cabinet decision). Dependants add SAR 400 a month each, usually paid by the employee.

GOSI is the other line. For an expat the employer pays 2% (occupational hazards) and the employee pays nothing. For a Saudi risk manager who first joined GOSI on or after 3 July 2024, the employer pays 12.75% and the employee 10.75% on 1 October 2026 (the annuity part rises 0.5 points every 3 July until 11% in 2028); under the old system it is 11.75% and 9.75%. The base is basic plus housing, floored at SAR 1,500 and capped at SAR 45,000 a month.

Accrue the end-of-service award from day one. Saudi law pays half a month of actual wage per year for the first five years and a month per year after that; resignation reduces it (none before two years, a third up to five, two thirds up to ten).

Is Risk Manager a Saudized Job? Not on the List — but Nitaqat Still Counts

Risk Manager is not on the Saudized-professions list we track (reviewed 1 October 2026): no ministerial decision we know of reserves a fixed share of risk manager posts for Saudis. That does not make the hire neutral. Every expat you add still lowers your establishment's weighted Saudi percentage in Nitaqat, and Nitaqat decides whether you can issue visas and renew iqamas.

How a Risk Manager Hire Moves Your Nitaqat Band

Whatever the profession rules say, Nitaqat is the ratio Qiwa checks before it lets you issue a visa, renew an iqama or accept a transfer. It is a points system. A Saudi employee paid SAR 4,000 or more a month is worth one point; one paid less is worth half. A Saudi employee with a documented disability is worth 4 points, but only up to a tenth of your headcount. Expats are not points at all — they only add to the total you divide by.

Two practical consequences for a risk manager hire. First, a Saudi risk manager on a contract that is not documented on Qiwa scores nothing: since 15 April 2026 undocumented contracts are ignored. Second, the band each percentage buys is set per activity and company size by formulas HRSD keeps unpublished, so the only reliable check is Qiwa's own calculator, run before you sign an expat offer.

Qualifications and Certifications

Here Saudi Arabia diverges sharply from licensed professions like accounting and engineering. There is no individual state licence to practise as a risk manager. An accountant must hold SOCPA registration and an engineer must hold Saudi Council of Engineers (SCE) accreditation tied to their work permit, but no equivalent personal "risk manager licence" exists. The regulation operates at the firm level instead: banks are supervised by SAMA (the Saudi Central Bank) and capital-market firms by the CMA (the Capital Market Authority), and these regulators impose risk-management, governance and "fit and proper" requirements on the regulated institutions themselves.

The practical consequence for employers is that senior risk and compliance officers in regulated firms may need regulator approval or notification under fit-and-proper rules before they can take up a controlled function. So while the individual does not carry a personal licence, the institution must be able to demonstrate that the person it appoints to a senior risk role is fit and proper - sufficiently competent, experienced and of good repute. In a non-regulated corporate (for example a contractor, developer or manufacturer hiring an enterprise-risk manager) even that firm-level layer does not apply, and you simply hire on merit.

Because there is no mandatory licence, professional credentials do the heavy lifting in screening. Employers value the FRM (Financial Risk Manager, awarded by GARP), the PRM (Professional Risk Manager), and the CFA charter for investment-risk roles, layered on top of a relevant degree. For financial-crime and AML-heavy mandates the ACAMS certification is highly regarded. Prioritise FRM or CFA plus demonstrable regulated-firm experience and a working knowledge of SAMA and CMA expectations; for a fit-and-proper-controlled role, also confirm the candidate can clear the institution's regulatory approval process.

Arabic-Language Expectations

Board packs and statutory filings often need Arabic and English versions, and ZATCA, GOSI and bank correspondence may arrive in Arabic. For reporting and controllership roles, bilingual candidates are worth a premium; for analytical roles inside an English-speaking group, Arabic is an advantage rather than a requirement.

From Offer to Iqama: Qiwa, Muqeem and GOSI

The paperwork order for a risk manager hire in the Kingdom:

1. Offer and visa route: a candidate already in the Kingdom can move to you by service transfer on Qiwa; an overseas hire needs a work-visa allocation issued through Qiwa against your Nitaqat standing
2. Arrival and iqama: after entry, the medical check and iqama issuance run through Muqeem/Absher; keep the iqama and work permit valid for the whole contract
3. Contract on Qiwa: the employment contract is documented on Qiwa — and only Qiwa-documented Saudi contracts count for Nitaqat
4. GOSI registration: register the employee with GOSI from the start date

Contract terms to get right: a probation clause of up to 90 days (180 only with a written extension), notice on an indefinite contract of 30 days from the employee or 60 days from you under the 2025 amendments, 21 days' annual leave (30 after five years) and the statutory sick-leave scale of 30 days full pay, 60 days at three-quarters and 30 unpaid.

Finding Candidates: Jadarat, Boards and Referrals

The Saudi finance and risk talent market is well served by digital channels, and most employers run a blended approach:

• Niche and regional job boards such as MenaJobs, which concentrate Saudi-based, work-authorised finance and risk candidates and cut the irrelevant-overseas-applicant noise of generic global boards.
• LinkedIn for active and passive sourcing of FRM- and CFA-qualified risk professionals, especially mid-to-senior profiles who rarely apply cold.
• Jadarat and Taqat - the national HRDF/Hadaf employment portals - which are essential when you want to hire Saudi nationals and bank Nitaqat credit.
• Bayt and other regional boards with deep Saudi reach.
• Specialist financial-services recruitment agencies for senior, confidential CRO or head-of-risk mandates where the search must be discreet; expect a placement fee of a meaningful percentage of annual salary.

Because applicant volume is high but truly qualified risk talent is thin, lead with a tightly written job description that names the FRM or CFA expectation, the regulated-firm experience required, the fit-and-proper context, and visa status expectations up front to filter early.

Sample Risk Manager Job Posting That Converts (Saudi Arabia)

Job title: Risk Manager (Enterprise & Credit Risk) - Riyadh, Saudi Arabia

About the role: We are a [bank / finance company / asset manager / PIF portfolio company] in [Riyadh / Jeddah / Eastern Province] seeking an experienced Risk Manager to own the risk framework, drive Basel and regulatory compliance, and embed controls across the business. You will report to the Chief Risk Officer and work closely with SAMA / CMA on prudential matters.

Key responsibilities:

• Develop and maintain the enterprise-risk framework, risk appetite and key risk indicators.
• Measure and report credit, market, liquidity and operational risk to the board risk committee.
• Support Basel implementation, ICAAP and regulatory stress testing.
• Strengthen AML, sanctions-screening and financial-crime controls.
• Liaise with SAMA / CMA and external auditors on prudential and governance matters.

Requirements: Bachelor's degree in Finance, Economics or a quantitative field; FRM (GARP) and/or CFA strongly preferred (PRM or ACAMS an advantage); 5+ years' risk experience in a SAMA- or CMA-regulated firm; working knowledge of Basel, ICAAP and Saudi prudential rules; awareness of fit-and-proper requirements for controlled functions. Transferable iqama preferred.

What we offer: Competitive salary (SAR [X]-[Y]/month) plus performance bonus, housing and transport allowances, medical insurance, employer-sponsored iqama, GOSI registration and end-of-service award per Saudi Labor Law.

Tip: state the salary band, the FRM/CFA expectation and the regulated-firm experience in the post itself - this single change sharply cuts unqualified applications.

Risk Manager Screening Checklist

• Work authorisation: Transferable iqama, Saudi national status, or an overseas candidate you are willing to sponsor and budget for.
• No licence, but verify credentials: There is no individual risk-manager licence - confirm FRM (GARP), CFA, PRM or ACAMS directly with the issuing body rather than trusting the CV.
• Fit-and-proper awareness: For a regulated SAMA/CMA firm, confirm the candidate understands and can clear the institution's fit-and-proper approval for a controlled risk function.
• Regulated-firm experience: Demonstrable risk experience inside a Saudi or GCC bank, finance company, insurer or capital-market firm.
• Technical depth: Test Basel, ICAAP, credit/market-risk modelling and stress-testing knowledge with a scenario question.
• AML / financial crime: For relevant mandates, confirm hands-on AML, sanctions-screening and transaction-monitoring experience.
• Systems: Confirmed hands-on use of the risk/GRC and data tools your business runs.
• Notice period: Confirm the candidate's current notice — on an indefinite Saudi contract, 30 days when the employee resigns — and whether a Qiwa service transfer is possible.