Risk & BCM Lead

Job Purpose The Risk & BCM Lead is a senior individual contributor role within the Governance, Risk & Compliance (GRC) function, supporting the development, implementation, and continuous operation of enterprise risk management and business continuity programs across the Group and its business verticals. The role provides day-to-day technical coordination for risk assessments, risk registers, treatment plans, business impact analyses, continuity plans, exercises, and management reporting. The role requires a strong risk and continuity professional with the ability to work closely with functions, vertical focal points, risk champions, BCM coordinators, and external advisors to promote consistent application of Group standards. Key Responsibilities 1. Enterprise Risk Management • Execute the approved ERM framework, policy, methodology, risk taxonomy, and risk appetite under the direction of the Risk & BCM Director. • Facilitate enterprise, functional, project, and vertical risk assessments, and maintain risk registers, treatment plans, KRIs, controls, and action records. • Review and constructively challenge risk ratings, treatment adequacy, action ownership, and target dates, escalating material or overdue matters as needed. • Monitor incidents, emerging risks, and control weaknesses, and prepare practical analysis and recommendations for management. 2. Business Continuity & Operational Resilience • Execute the BCM framework, policy, standards, and lifecycle requirements in alignment with ISO 22301 principles and Group expectations. • Coordinate business impact analyses, continuity risk assessments, recovery strategies, and business continuity plans, aligned with crisis management and IT disaster recovery. • Plan and facilitate BCM exercises and tests, document lessons learned, and track remediation actions through to closure. 3. Governance, Reporting & Assurance • Prepare Risk & BCM dashboards, reports, and decision-support materials for the Risk & BCM Director and management forums. • Monitor compliance with Risk & BCM requirements and track management actions, exceptions, and overdue deliverables. • Maintain accurate Risk & BCM data, documentation, and evidence repositories to support traceability and auditability. • Support internal and external audits, assessments, and cross-functional coordination with GRC, Internal Audit, Cybersecurity, IT, HSE, Legal, HR, and Finance. 4. Stakeholder, Culture & Team Coordination • Provide practical guidance to functions and verticals, facilitate workshops, and support implementation of Risk & BCM requirements. • Deliver awareness and training activities and coordinate the Group network of risk champions and BCM coordinators. • Lead assigned workstreams, coordinate analysts or consultants, and escalate delivery issues to the Risk & BCM Director. Qualifications and Experience • Bachelor's degree in Risk Management, Business Administration, Engineering, Finance, Emergency Management, or a related field. Master's degree is a plus. • 5–6 years of professional experience, including at least 4 years of hands-on experience in enterprise risk management and/or business continuity, preferably within a large or complex group. • Demonstrated experience in risk assessments, risk registers, business impact analysis, continuity planning, exercises, and management reporting. • Professional fluency in English and Arabic. • RIMS-CRMP, IRM, CRMA, ISO 31000, CBCI, CBCP, ISO 22301 Lead Implementer/Auditor, or an equivalent certification (highly preferred). • PMP, PRINCE2, or other recognized GRC certification (additional advantage). Show more Show less