Abdulrahman AlShaban

Center of National Health Insurance (CNHI) • Risk Management Director / GRC Riyadh, Saudi Arabia
04/2021 - Presen
• Spearheaded the full establishment of CNHI’s Enterprise Risk Management (ERM) function from the ground up, including framework design, risk appetite
development, and departmental risk registers.
• Led the identification, assessment, and mitigation of strategic, operational, financial, and reputational risks impacting CNHI’s core functions and national healthcare
funding model.
• Integrated risk management practices across all departments, ensuring ownership, continuous monitoring, and alignment with the organization’s strategic goals
and national health transformation vision.
• Regularly reported institutional risk profiles and emerging threats to executive leadership, enabling informed decision-making through actionable insights,
dashboards, and trend analyses
• Directed the Governance, Risk, and Compliance (GRC) strategy, supporting the CEO, Board, and Chiefs in embedding risk into strategic and operational decisions.
• Built and operationalized the Business Continuity Management (BCM) framework, including crisis management, emergency response, and business impact
analysis across departments.
• Chaired the Policy & Procedure Risk Committee, ensuring alignment of internal controls with national regulations and CNHI’s strategic objectives.
• Promoted a risk-aware culture by leading awareness sessions, integrating risk practices with HR processes, and ensuring performance-based risk accountability.
• Developed a Risk Management Information System (RMIS) to monitor KRIs and generate real-time executive dashboards.
• Ensured contractual and operational risk oversight in CNHI’s role as the national healthcare payer, particularly in budget allocation and health benefit package
delivery to HHC and clusters.
• Established strong regulatory and stakeholder relationships with MOF, HHC, auditors, and regulatory bodies to ensure seamless risk governance and compliance.
• Developed and implemented CNHI’s comprehensive Business Continuity Management (BCM) strategy, ensuring continuity of critical health insurance functions
and national operations during crises.
• Established CNHI’s Crisis and Emergency Response Center, coordinated the formation of incident response teams, and led periodic simulation exercises to test
organizational readiness.
• Ensured regulatory compliance with national and international standards, integrating risk controls into all policies and procedures, and aligning CNHI’s

1. Provide input with regard to Risk Management in the overall Division’s Strategic Plan and provide guidance and advice to reporting employees to ensure proper cascade of this plan into their operations.
2. Oversee the functions and services of Risk Management and ensure their alignment with the overall Strategy, Risk Division’s strategies and plans.
3. Participate in the planning and establishment of long and short term goals for Risk Management ensuring that objectives and programs for Najm are aligned to the company’s vision, mission and overall guidelines.
4. Lead and assume responsibility for the effective implementation of Najm’s corporate strategy as it pertains to risk management compliance activities.
5. Lead the development and implementation of Najm Risk Management strategy including risk identification, analysis, response planning, monitoring and controlling (RCSA)
6. Lead the development of risk prevention plans, mitigation plans, emergency plans and ensure consistency of risk mitigation analysis and contingency plans across all Divisions/ Departments.
7. Liaise and coordinate with the various Divisions/ Departments across Najm on implementation of agreed risk mitigation plans and provide assistance and advice as necessary.
8. Direct the establishment and review investment compliance restrictions in order to prevent potential compliance breaches and reduce the risk of other business errors.
9. Lead and direct the Risk Management team to identify and analyse areas of operational, financial and strategic risks, and conduct risk evaluation in responding to such risk factors.
10. Work with concerned Divisions, such as Finance, IT and Operations, to ensure that Najm has effective financial controls, including the use and maintenance of proper accounting practices, records management and information security.
11. Manage and track Najm’s operational, financial and strategic risks, and report findings to the CEO on a regular basis.

• Monitor and review the impact of the strategic risk initiatives and reassess the overall Enterprise Risk Management Framework as appropriate
• Review and recommend changes to risk strategy and risk appetite of the Company
• Update the risk strategy and risk appetite statement as per Board’s approval
• Monitor and review the adequacy of risk tolerance levels in line with the overall risk appetite of the Company
• Review and recommend changes to key risk policies and procedures documents
• Co-responsible along with business units to identify key risks the Company is exposed to
• Plan and organize enterprise-wide risk assessments to identify and improve the management of key business risks
• Continuously monitor the risk profile of the Company ensuring key risks are monitored and overall risk appetite is adhered to
• Prepare adequate risk reports to be submitted to intended audience(s) including Executive Manager and Board
• Keep abreast of key developments in the risk management industry and latest risk management methodology and technologies
• Conduct risk awareness training/workshops for employees to further improve the risk awareness and reputation of risk management internally
• Develop the annual risk management plan of the Company for submission to SAMA at the time of annual financials filing
• managing the enterprise risk (Compliance, Operational, Strategic and Financial risks) for the Company in co-ordination with other Department Heads at the Company
• ensure that all risk management policies are consistent with the overall strategic objectives approved by the Board

• Develop and agree a Risk and Non- Regulatory compliance strategy, framework and annual plan that will ensure the Operations continues to meet the requirements of the Group Risk Management Framework

• Lead and assist the operations in the implementation of the Company’s risk management strategy, procedures, controls, policies and standards.

• Develop Risk Management related Policies and procedures to be approved by the Risk Committee

• Ensure accuracy, quality and timeliness of reporting to the following: Management/Risk Committee
• Support and Lead the Operations in the Implementation and management of the Risk Management processes including but not limited to: Operating Assurance Statement, Risk Appetite, Corporate Risk Profile, Risk Committee Meetings, Group Policy Compliance, Loss Event Identification and Reporting, and Delegated Authority Framework.
• Prepare, monitor and report risk and compliance information to meet the requirements of the risk management framework for the Operations.

• Build and manage relationships across the Operations in order to ensure and support embedding the Risk management framework into all facets of the businesses
• Support the Operations in the implementation and management of the Operational Risk Management framework that provides robust and consistent methods and standards for risk identification, assessment, and management reflecting the Board appetite for risk.
• Ensure appropriate Risk input in significant corporate transactions.
• Supervise, coordinate and manage activities for the Operations pertaining to Business Continuity Management in accordance to the BCM Policies and standards and conduct the BCM Tests as per the Annual Test calendar.
• Manage report and take action to address and/or escalate risks, non-compliance with policies, agree remedial actions and/or provide early warning of issues and implications to the Executive Team of the Operations.
• Management of Country Risk Committee meetings’ to ensure that the agenda is comprehensive covering the aspects of both Risk & Compliance.
• To provide staff training and awareness-raising on risk management framework and requirements.

• To manage & coordinate the countries the implementation of the anti money laundering procedures in compliance with AML P&P’s, rules & regulations.

AlInma Bank Riyadh, KSA
Operational Risk Assistant Manager
Reporting to: Head of Enterprise Risk

• implementing strategy framework and policy and in implementing the relevant roadmaps for projects
• guide and assist the business and supports units during the process of control self-assessment procedure on how to identify and report risk issues
• Guide business and support units on the use of proper reporting templates and methodology
• Assist in analyzing and classifying gathered information in order to build up the Risk Register
• Prepare ORM & Loss Data SAMA Reporting
• implementation of Policies and Procedures updates.

AlInma Bank Riyadh, KSA
Operational Risk Senior Officer
Reporting to: Head of ORM

• Assisting Department Head in implementing strategy framework and policy and in implementing the relevant roadmaps for projects.
• Constant communication with representatives of various business and support units
• Under the direction of the Department head, guide and assist the business and supports units during the process of control self-assessment procedure on how to identify and report risk issues
• Guide business and support units on the use of proper reporting templates and methodology
•Review business process to identify potential risks and assess adequacy of controls
•Guide business and support unites during the implementation of loss data collection procedures
•Guide business and support units in the documenting risk mitigation procedures
•Assist in analyzing and classifying gathered information in order to build up the Risk Register
•Assist department head in the preparation of reports
•Assist ERM for Capital Charge Calculation
•Coordinate with BSU & ORM head for organizing workshops
•Assist Department head in documentation and implementation of Policies and Procedures updates
• Oversee the fraud investigation activities and follow up with the Fraud Investigation
• Oversee and follow up on Anti Fraud investigation through coordination with Internal Audit Group

Reporting to: Head of ORM

• Assisting Department Head in implementing strategy framework and policy and in implementing the relevant roadmaps for projects.
• Constant communication with representatives of various business and support units
• Under the direction of the Department head, guide and assist the business and supports units during the process of control self-assessment procedure on how to identify and report risk issues
• Guide business and support units on the use of proper reporting templates and methodology
•Review business process to identify potential risks and assess adequacy of controls
•Guide business and support unites during the implementation of loss data collection procedures
•Guide business and support units in the documenting risk mitigation procedures
•Assist in analyzing and classifying gathered information in order to build up the Risk Register
•Assist department head in the preparation of reports
•Assist ERM for Capital Charge Calculation
•Coordinate with BSU & ORM head for organizing workshops
•Assist Department head in documentation and implementation of Policies and Procedures updates
• Oversee the fraud investigation activities and follow up with the Fraud Investigation
• Oversee and follow up on Anti Fraud investigation through coordination with Internal Audit Group

• Assist in building/developing templates for Control Risk Self Assessment and ensure appropriate training to focal points
• Develop plans to enhance Operational Risk awareness across the bank.
• Develop and coordinate with IT department for developing and implementing loss data reporting tool.
• Perform an investigation on operational events and provide a detailed report to ORM head.
• Assist ORM head for analyzing of procurement committee files and provide opinion for better decision making.
• Coordinate with Risk Management Group departments to prepare and submit business continuity plans to each department.
• Establish process maps for specific activities (loss data collection, call center & International Transfers Enjaz).
• Prepare an Arabic version of ORM (framework, loss data) presentations for bank staff.
• Translation ORM Policies & Procedures to Arabic
• Coordinate with the bank businesses to initiate Key Risk Indicator data collection process.
• Coordinate with different bank’s departments to collect historical bank width operational Risk losses and built loss database & ensuring adequate linkage with Risk classification as per Basel ll requirements.
• Assisting in the operational Risk System implementation process.
• Monitoring & controlling Op-Risk Provision, Under Investigation & P&L accounts.
• Monitoring & controlling Treasury deals and updating Market Risk reports (Currency, FX override/Open Position & Market Risk Supervision Report).
• Designation as the Secretary for Asset & liability Committee ALCO.
• Designation as the Secretary for RMG Risk Committee.