Director - Governance, Risk & Compliance (GRC) | Dubai, UAE

About Moove Moove is building the world’s largest fleet and best-in-class technologies that power mobility platforms. Its flagship Drive-to-Own (DTO) product democratises access to vehicle ownership with a revolutionary revenue based financing model, enabling underserved mobility entrepreneurs to thrive.

Moove’s growth has been fuelled by its global Uber partnership and support of leading investors and lenders, including Uber, Mubadala, BlackRock, MUFG, and many others. With operations now spanning 19 cities across 6 continents - Africa, Asia, Europe, North America, South America, and the Middle East - Moove continues to expand its offerings through strategic acquisitions and partnerships with industry leaders, including Waymo and Uber. Moove is transforming mobility to make it safer, more efficient and accessible to all, while providing economic opportunities and supporting skills development in the mobility sector.

About The Role We are seeking a highly experienced GRC leader to establish and scale a global Governance, Risk & Compliance framework across all Moove markets. This role will own enterprise governance, risk management and compliance strategy, with a clear priority on governance initiatives and control environment maturity.

You will be responsible for building the overarching governance framework, embedding risk-based decision‑making, and ensuring regulatory and ethical compliance in all jurisdictions where Moove operates. You will lead executive-level forums, define policy governance structures, and oversee investigations, whistleblowing, and enterprise risk processes, supported by a junior resource providing operational support across GRC workstreams.

What You’ll Be Doing The role exists to ensure Moove has a robust, enterprise‑wide GRC framework that provides effective oversight, clear accountability and proactive management of risks and compliance obligations across all markets.

Critical outcomes for the next 6–12 months include:

• Roll out core GRC initiatives across all markets, with clear emphasis on governance, internal controls and policy frameworks.
• Establish and embed an enterprise governance framework with defined forums (e.g. GRC SteerCo), roles and accountabilities across Board, executive leadership and operational management.
• Implement and operationalise a global enterprise risk management approach, including group‑wide risk assessments, reporting and remediation tracking.

Stand up a global compliance program (anti‑bribery & corruption, sanctions, AML/CTF, third‑party due diligence, Speak‑Up, training) with clear ownership, processes and KPIs.

Core Responsibilities:

• Governance (Enterprise Oversight & Control Environment)
• Establish and maintain the enterprise governance framework, ensuring clear accountability across Board, executive leadership, and operational management.
• Design and oversee the internal control environment, embedding ownership of controls within business functions and ensuring alignment with strategic objectives.
• Lead executive-level governance forums, driving visibility of key issues, decision-making, and accountability for remediation.
• Define and implement policy governance structures, including development, approval, communication, and lifecycle management of all core policies and standards.
• Build feedback loops and continuous improvement mechanisms to strengthen governance maturity through lessons learned, incident analysis, and control enhancements.
• Risk (Enterprise Risk & Operational Exposure Management)
• Identify, assess, and manage enterprise and operational risks, ensuring material risks are visible, prioritized, and actively mitigated across all markets.
• Embed a risk-based approach to decision‑making, integrating risk considerations into business operations, expansion and strategic initiatives.
• Oversee the development of risk assessment methodologies, including periodic risk reviews across key domains (financial, operational, regulatory, reputational).
• Drive root cause analysis and corrective action frameworks for incidents, ensuring sustainable fixes rather than surface-level remediation.
• Monitor and report on risk trends, emerging threats, and systemic vulnerabilities, providing actionable insights to executive leadership.
• Align risk management practices with global standards and frameworks (e.g., ISO 31000, Three Lines Model), adapted pragmatically to Moove’s maturity a…