How Geopolitical and Economic Disruption Are Reshaping the CRO Role in GCC Banking

As geopolitical uncertainty, tighter liquidity and digital disruption converge, the CRO role is evolving from compliance gatekeeper to strategic business leader.

For much of the past decade, GCC banks operated in an environment defined by strong liquidity, rapid credit expansion and relatively stable macroeconomic conditions. Supported by high oil revenues and ambitious national growth agendas, the region’s banking sector became synonymous with resilience, scale and sustained growth.

That resilience has been tested in recent months and, so far, the sector has responded well. Recent banking data published by the Central Bank of the UAE (CBUAE) and the Saudi Central Bank (SAMA) suggests that customer deposits have continued to grow despite heightened regional uncertainty.

Customer deposits increased by 17% year-on-year as of April 2026, and 2% from February to April 2026 in the UAE, while in Saudi Arabia, the growth in deposits was 11% year-on-year as of April 2026 and 2% from February to April 2026 , reinforcing both markets’ positions as regional safe havens for capital. Growth in monetary aggregates and non-resident deposits further suggests that regional and international investors continue to view GCC banking systems as stable, well-capitalized and resilient.

Importantly, there is little evidence so far of the capital flight or systemic liquidity pressures that some observers initially feared. Instead, the data suggests that the UAE and Saudi Arabia continue to play an important role as regional safe havens for capital, supported by strong banking fundamentals, prudent regulation and proactive central bank intervention.

Central banks have also played an important role. Proactive interventions helped preserve liquidity, support credit expansion and provide targeted relief to sectors facing short-term disruption. In the UAE, banks were able to extend working capital facilities and restructure short-term obligations for fundamentally healthy businesses, helping bridge temporary cash-flow pressures while maintaining confidence across the financial system.

As a result, resilience is no longer simply a measure of capital strength. It has become a strategic capability that underpins the sector’s ability to navigate an increasingly complex operating environment.

However, what is clearer than ever before is that the operating environment around banks is changing rapidly—and as a result, so is the role of the CRO.

The recent regional conflict accelerated that realization. Traditional stress-testing models were largely designed around financial shocks such as market volatility, liquidity tightening, and credit deterioration. What many institutions are now confronting is a far broader challenge, where geopolitical tensions, cyber threats, operational resilience, and credit risk can all influence one another simultaneously.
Across the GCC, this has prompted some banks to reassess whether existing business continuity and resilience frameworks are sufficiently equipped for a far more interconnected risk landscape.

This is particularly relevant in a region where regulatory frameworks have prioritized sovereignty, local data residency, and operational control. Recent events have also created an opportunity for institutions to reassess how these strengths can be balanced with greater operational flexibility and diversification, e.g., for digital data storage.

At the same time, a second structural shift is unfolding more quietly beneath the surface.

According to analysis from FTI Consulting, GCC banks originated close to $1 trillion in new lending between 2020 and 2025 across Saudi Arabia, the UAE and Qatar. Much of this growth took place during a prolonged low-interest rate environment and elevated liquidity conditions, meaning many portfolios, particularly across real estate and mortgage lending, have not yet been tested through a full economic stress cycle.

That could create a more complex operating backdrop for the years ahead.
For banks, the longer-term risk is not simply operational disruption. While business continuity and cybersecurity remain critical priorities, credit risk remains equally important. If short-term disruption were to evolve into a prolonged economic slowdown, pressure could emerge across borrower segments and asset classes, particularly in sectors that have benefited from strong credit expansion in recent years. In certain scenarios, a meaningful correction in real estate markets would have implications not only for borrowers but also for portfolio performance and risk provisioning across the banking sector.

This is precisely the type of forward-looking scenario that CROs must now anticipate, rather than simply respond to.

Modern CROs are increasingly expected to balance resilience, growth, operational continuity and profitability simultaneously, while helping institutions navigate a far more dynamic and interconnected operating environment. More importantly, the CRO can no longer afford to be purely backward-looking.

The institutions likely to outperform over the next decade will be those capable of identifying disruption early, adapting faster and embedding risk intelligence directly into strategic decision-making.

That requires a fundamentally different approach to risk management. One built around predictive intelligence, integrated scenario planning, dynamic stress testing and real-time decision-making.

Artificial intelligence and advanced analytics are becoming increasingly important in that transition.

Some leading regional banks are already investing in AI-enabled underwriting, early-warning systems and advanced collections capabilities that allow them to identify stress signals earlier and make more sophisticated portfolio decisions in real time. Others, however, continue to rely on fragmented legacy systems, manual workflows and reactive operating models.

That gap may become increasingly important during periods of disruption. Institutions that can identify emerging stress earlier, underwrite more effectively and anticipate portfolio deterioration before competitors will inevitably benefit from lower risk costs and stronger resilience outcomes.

Because in this new environment, resilience itself is becoming a competitive advantage.

The banks most likely to succeed will not necessarily be the largest or most conservative institutions. They will be the organizations capable of integrating risk more directly into strategic decision-making, modernizing operational infrastructure and responding dynamically to an increasingly volatile external environment.

The broader lesson for the sector is clear.

The GCC banking industry is entering a new era where resilience can no longer be measured purely through capital strength or regulatory compliance. Increasingly, resilience will be defined by adaptability and the ability to proactively anticipate interconnected geopolitical, operational, technological and economic disruption in real time.