Risk & BCM Lead

Overview

The Risk & BCM Lead acts as a key senior specialist within the Governance, Risk & Compliance (GRC) department. This role is responsible for advancing, executing, and continuously managing the enterprise risk management and business continuity frameworks across the Group and its business segments. It involves daily oversight and coordination of risk assessments, registers, treatment plans, business impact analyses, continuity procedures, testing exercises, and management reporting.

Key Responsibilities

• Implement the enterprise risk management framework, policies, methodologies, risk taxonomy, and appetite under the guidance of the Risk & BCM Director.
• Facilitate risk evaluations across enterprise, functional, project, and vertical levels; maintain risk registers, treatment plans, key risk indicators (KRIs), controls, and action logs.
• Critically review risk ratings, evaluate treatment effectiveness, monitor action ownership and deadlines, escalating critical or overdue issues when necessary.
• Track incidents, emerging risks, and control deficiencies, delivering actionable analysis and recommendations to management.
• Execute the business continuity management framework, standards, and lifecycle aligned with ISO 22301 and Group directives.
• Coordinate business impact analyses, continuity risk assessments, recovery strategies, and plans integrated with crisis management and IT disaster recovery processes.
• Lead and organize BCM exercises and tests, document lessons learned, and oversee follow-up on corrective actions through to completion.
• Produce Risk & BCM dashboards, reports, and decision-making materials for senior management and governance forums.
• Ensure adherence to Risk & BCM policies, monitor compliance, and maintain records of management actions, exceptions, and overdue deliverables.
• Maintain comprehensive Risk & BCM documentation, data repositories, and evidentiary materials to support audit readiness and traceability.
• Assist with internal and external audits, collaborate cross-functionally with GRC, Internal Audit, Cybersecurity, IT, HSE, Legal, HR, and Finance teams.
• Provide subject matter expertise and practical guidance to various company functions and verticals; facilitate workshops and support Risk & BCM program adoption.
• Conduct awareness and training initiatives; coordinate the network of risk champions and BCM coordinators across the Group.
• Lead designated workstreams, manage analysts or consultants, and escalate delivery challenges to the Risk & BCM Director.

Qualifications and Experience

• Bachelor’s degree in Risk Management, Business Administration, Engineering, Finance, Emergency Management, or related field; Master’s degree considered advantageous.
• At least 5 to 6 years of relevant professional experience, including a minimum of 4 years in hands-on enterprise risk management and business continuity within large or complex organizations.
• Demonstrated expertise executing risk assessments, managing risk registers, conducting business impact analyses, developing continuity plans, running exercises, and preparing management reports.
• Proficient in English and Arabic languages.
• Professional certifications highly preferred such as RIMS-CRMP, IRM, CRMA, ISO 31000, CBCI, CBCP, ISO 22301 Lead Implementer/Auditor.
• Additional certifications in project management or GRC (e.g., PMP, PRINCE2) are considered beneficial.