Risk and Business Continuity Specialist

Job Title: Risk and Business Continuity Specialist Location: Riyadh, KSA (with periodic site visits to project locations) Key Responsibilities Risk Management * Establish and maintain project and corporate risk registers across the projects * Facilitate risk identification workshops with project managers, engineering, procurement, and construction teams * Perform qualitative and quantitative risk analysis (probability/impact assessment, Monte Carlo simulation, schedule/cost risk analysis) * Integrate risk analysis with EVM and schedule performance data to flag emerging threats to cost, schedule, and quality * Review contract risk exposure (FIDIC-based EPC contracts, LDs, force majeure clauses, EOT triggers) * Support tender-stage risk assessments for new project bids * Track risk mitigation actions and report residual risk to management Business Continuity Management * Develop, implement, and maintain the company’s Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP), aligned to ISO 22301 * Conduct Business Impact Analyses (BIA) for critical project and corporate functions * Design and run BCP tabletop exercises and simulations; document lessons learned * Maintain emergency response and crisis management procedures for project sites * Coordinate with HSE, IT, legal, and insurance functions on continuity and resilience planning Reporting & Governance * Prepare risk dashboards and KRIs for executive and client reporting * Maintain compliance with ISO 31000 (Risk Management) and ISO 22301 (BCM) frameworks * Support internal/external audits related to risk and continuity management * Liaise with insurers on project-specific coverage and claims support Education * Bachelor’s degree in civil, Electrical, or Mechanical Engineering, or a related Business field Experience * 5–10 years of experience in risk management and/or business continuity, with a strong preference for candidates from EPC, construction, or infrastructure contracting backgrounds * Direct experience with energy (transmission, HVDC, substations) or water infrastructure projects in KSA is a strong advantage * Familiarity with FIDIC contract forms and EPC project structures Certifications (applicable/relevant to KSA market) * PMI-RMP (Risk Management Professional) — preferred * ISO 31000 Risk Management certification * ISO 22301 Business Continuity Management certification, or CBCP/ CBCI (Certified Business Continuity Professional/Institute) Technical Skills * Risk analysis software (Primavera Risk Analysis, RISK, or Active Risk Manager) * Working knowledge of Primavera P6 for schedule risk integration * Strong Excel/data analysis skills for KRI dashboards Show more Show less

Bachelor’s degree in civil, Electrical, or Mechanical Engineering, or a related Business field

Risk Management: Establish and maintain project and corporate risk registers across the projects; Facilitate risk identification workshops with project managers, engineering, procurement, and construction teams; Perform qualitative and quantitative risk analysis (probability/impact assessment, Monte Carlo simulation, schedule/cost risk analysis); Integrate risk analysis with EVM and schedule performance data to flag emerging threats to cost, schedule, and quality; Review contract risk exposure (FIDIC-based EPC contracts, LDs, force majeure clauses, EOT triggers); Support tender-stage risk assessments for new project bids; Track risk mitigation actions and report residual risk to management. Business Continuity Management: Develop, implement, and maintain the company’s Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP), aligned to ISO 22301; Conduct Business Impact Analyses (BIA) for critical project and corporate functions; Design and run BCP tabletop exercises and simulations; document lessons learned; Maintain emergency response and crisis management procedures for project sites; Coordinate with HSE, IT, legal, and insurance functions on continuity and resilience planning. Reporting & Governance: Prepare risk dashboards and KRIs for executive and client reporting; Maintain compliance with ISO 31000 (Risk Management) and ISO 22301 (BCM) frameworks; Support internal/external audits related to risk and continuity management; Liaise with insurers on project-specific coverage and claims support.