Role Purpose : Responsible of supporting the effective implementation and continuous enhancement of the Group’s Risk Management and Business Continuity Management frameworks. The role ensures consistent risk identification, assessment, reporting, and continuity readiness through strong stakeholder engagement, robust analytics, and disciplined execution of risk and BCMS practices.
Key Accountabilities :
- Coordinating the identification, assessment, measurement, and documentation of risks across the Group and subsidiaries.
- Applying and embedding approved ERM methodologies, tools, templates, and techniques in day‑to‑day risk activities.
- Supporting the implementation and maintenance of Group ERM framework, policies, procedures, and standards.
- Ensuring alignment in practice with COSO ERM and ISO 31000, and highlighting gaps or deviations.
- Facilitate and document periodic risk workshops with subsidiaries, functions, and Risk Champions.
- Support Management and Risk Champions through, hands-on guidance on risk identification, assessment, treatment, monitoring, use of tools, templates, and scoring methodologies
- Review risk registers, challenging the completeness, consistency, risk articulation, cause–impact clarity, risk scoring
- Track and support the identification and assessment of emerging and strategic risks.
- Monitor risk ownership and escalate gaps where accountability is unclear or weak.
- Reviewing risk mitigation and treatment plans to ensure they are proportionate to risk severity, practical and time-bound and clearly owned by accountable stakeholders
- Tracking and reporting progress of risk enhancement and remediation actions across subsidiaries.
- Escalating overdue actions, deteriorating risks, and critical issues in a timely manner.
- Develop and maintain dashboards and analytics (e.g., Power BI, GRC platforms).
- Prepare periodic ERM reporting packs for management and committees.
- Supporting the implementation of the Group BCM framework in line with ISO 22301 & Regulatory requirements
- Monitoring subsidiary adherence to BCM policies, standards, and governance requirements.
- Supporting establishment and effectiveness of BCM governance structures
- Support subsidiaries in critical business processes, key dependencies and suppliers and disruption and crisis scenarios
- Track development, maintenance, and periodic review of Business Continuity Plans (BCP)
- Coordinate and monitor BCM testing, simulations, and crisis drills.
- Review test outcomes, identify gaps, and track remediation actions to closure.
Prepare BCM readiness and gap reports, including overdue actions and weaknesses.
Necessary Knowledge and Experience
- Demonstrate working knowledge of internationally recognized risk management frameworks in ISO 31000 & COSO Enterprise Risk Management (ERM)
- Excellent communication, interpersonal and presenting skills, with the ability to effectively collaborate with internal and external stakeholders at all levels.
- Demonstrate strong day-to-day communication skills including, facilitating workshops and meetings, explaining risk concepts in clear, non-technical language, drafting concise reports and presentations
- Strong knowledge and analytical capability to interpret risk data and reports, with the ability to recognize trends, inconsistencies, and control gaps across the organization.
- Demonstrated judgment and risk-based thinking, with the ability to formulate practical, proportionate recommendations to enhance controls, business processes, and the quality of risk and management reporting.
Solid knowledge and hands-on experience in Business Continuity Management Systems (BCMS), including a strong understanding of ISO 22301 principles, business impact analysis, continuity strategies, crisis management, and the design, implementation, testing, and continuous improvement of BCPs, DRPs, and crisis management frameworks.
Education and Certification Requirements
- A bachelor’s in business, risk management, accounting, finance or related discipline.
- 5+ years of Business Consultancy Projects, Project Management, Business Process Reviews, Risk Management, BCMS or related experience.
- Experience in a Big4 firm with a focus on risk management would be an advantage.
- Knowledge of regulatory & compliance (Preferred in KSA).
Advanced Excel, Word, PowerPoint, Visio, PowerBI. SAP knowledge is an advantage
