Manager-Enterprise Risk Management

About This Role

Job Summary: To establish, implement, and operationalize the organization’s Enterprise Risk Management (ERM) and Business Continuity Management (BCM) capabilities from the ground up - including frameworks, governance, tools, risk registers, BIA, continuity strategies, plans, training, exercises, and reporting - so the organization can manage uncertainties proactively and maintain operations during disruptions. This role required ERM and BCM processes to be initiated, structured, and embedded into routine governance and decision-making.

Key Accountabilities & Responsibilities: Enterprise Risk Management (ERM) • Develop and implement the ERM Framework (policy, methodology, governance structure, roles, risk taxonomy, risk appetite concepts, escalation rules).

• Create and deploy ERM tools: risk register template, scoring methodology, heat maps, treatment plans, and reporting dashboards.

• Lead enterprise-wide risk identification workshops across business functions.

• Monitor and analyse risks across business functions and consolidate into an enterprise view.

• Establish risk treatment planning discipline and track mitigation progress with clear owners, due dates, and effectiveness checks.

• Provide key inputs into enterprise risk reporting and communicate risk status internally.

• Set up and run ERM governance rhythm: risk committee cadence, executive updates, and periodic refresh cycles.

Business Continuity Management (BCM) • Develop and implement a BCM framework aligned to relevant expectations and organizational context (including local requirements where applicable).

• Define BCM governance: crisis management structure, roles, communications pathways, and plan ownership.

• Conduct and document BIA for all functions, including critical activities, RTO/RPO requirements (as applicable), dependencies, and recovery priorities.

• Develop contingency plans and recovery strategies for prioritized business processes.

• Work with IT to align BCM with disaster recovery expectations and clarify interplay between operational recovery and IT DR.

• Plan, conduct, and debrief regular disruption scenarios to test plan adequacy; maintain action logs and update plans regularly.

• Coordinate crisis management committee activities and readiness initiatives.

Capability Building & Embedding • Develop training material and run awareness sessions for process owners, leadership, and response teams.

• Create “how to” guidance and SOPs so teams can sustain ERM/BCM independently.

• Establish lessons-learned mechanism following exercises/incidents to continuously mature the system.

Requirements

Required Experience & Qualifications • 7+ years in relevant business performance / risk / resilience roles In Medical Industry.

• Demonstrated experience standing up ERM and BCM programs.

• Strong facilitation experience for workshops (risk identification, BIA sessions, exercise facilitation).

• Bachelor’s degree in business or related discipline.

• Risk qualification such as CRMA or PMI-RMP (or equivalent).

• Knowledge of relevant local continuity expectations (e.g., NCEMA awareness).

• Familiarity with ERM and risk assessment standards/frameworks (e.g., ISO 31000/31010, COSO).

• Strong organizational and project management skills; ability to deliver under time pressure.

• Excellent stakeholder management and executive communication (board/leadership ready outputs).

• Strong analytical capability; capable of producing meaningful observations and recommendations.

• Advanced Microsoft Office skills; ability to build dashboards and structured reporting packs.

Location: UAE