Risk & BCM Lead

Position Overview

We are seeking a seasoned Risk & BCM Lead to join our Governance, Risk & Compliance (GRC) function as a senior individual contributor. This pivotal role will be responsible for driving the development, implementation, and ongoing management of enterprise-wide risk management and business continuity programs across the Group and its diverse business verticals. The ideal candidate will provide expert technical coordination for critical activities, including risk assessments, risk registers, treatment plans, business impact analyses, continuity plans, exercises, and executive reporting. This position demands a highly skilled risk and continuity professional capable of collaborating effectively with cross-functional teams, risk champions, BCM coordinators, and external advisors to ensure the consistent application of Group standards and best practices.

Key Responsibilities

1. Enterprise Risk Management

• Framework Execution: Implement and oversee the approved Enterprise Risk Management (ERM) framework, policy, methodology, risk taxonomy, and risk appetite in alignment with the direction provided by the Risk & BCM Director.
• Risk Assessment & Register Management: Facilitate comprehensive enterprise, functional, project, and vertical risk assessments while maintaining detailed risk registers, treatment plans, Key Risk Indicators (KRIs), controls, and action records.
• Risk Evaluation & Escalation: Critically review and challenge risk ratings, the adequacy of treatment plans, action ownership, and target dates, escalating material or overdue matters to senior management as necessary.
• Risk Monitoring & Reporting: Track incidents, emerging risks, and control weaknesses, preparing insightful analyses and actionable recommendations for management consideration.

2. Business Continuity & Operational Resilience

• BCM Framework Implementation: Execute the Business Continuity Management (BCM) framework, policy, standards, and lifecycle requirements in strict accordance with ISO 22301 principles and Group expectations.
• Continuity Planning & Coordination: Lead business impact analyses, continuity risk assessments, recovery strategies, and the development of business continuity plans, ensuring seamless integration with crisis management and IT disaster recovery protocols.
• Exercise & Testing Oversight: Plan, facilitate, and document BCM exercises and tests, capturing lessons learned and tracking remediation actions to ensure timely closure and continuous improvement.

3. Governance, Reporting & Assurance

• Executive Reporting: Prepare comprehensive Risk & BCM dashboards, reports, and decision-support materials tailored for the Risk & BCM Director and senior management forums.
• Compliance Monitoring: Ensure adherence to Risk & BCM requirements while tracking management actions, exceptions, and overdue deliverables to maintain operational integrity.
• Documentation & Audit Support: Maintain meticulous Risk & BCM data, documentation, and evidence repositories to support traceability, auditability, and regulatory compliance. Collaborate closely with Internal Audit, Cybersecurity, IT, HSE, Legal, HR, and Finance teams on cross-functional initiatives.

4. Stakeholder, Culture & Team Coordination

• Guidance & Facilitation: Provide expert guidance to functions and verticals, lead workshops, and support the implementation of Risk & BCM requirements across the organization.
• Awareness & Training: Develop and deliver targeted awareness and training programs while coordinating the Group’s network of risk champions and BCM coordinators to foster a strong risk-aware culture.
• Workstream Leadership: Lead assigned projects, coordinate analysts or consultants, and proactively escalate delivery challenges to the Risk & BCM Director to ensure project success.

Qualifications & Experience

• Education: Bachelor’s degree in Risk Management, Business Administration, Engineering, Finance, Emergency Management, or a related discipline. A Master’s degree is considered advantageous.
• Professional Experience: Minimum of 5–6 years of relevant professional experience, with at least 4 years dedicated to enterprise risk management and/or business continuity within a large or complex organizational structure.
• Technical Proficiency: Proven expertise in risk assessments, risk registers, business impact analysis, continuity planning, exercises, and management reporting.
• Language Skills: Fluency in both English and Arabic is essential.
• Certifications: Preferred certifications include RIMS-CRMP, IRM, CRMA, ISO 31000, CBCI, CBCP, or ISO 22301 Lead Implementer/Auditor. Additional value is placed on PMP, PRINCE2, or other recognized GRC certifications.