Manager, Risk & Business Continuity

Role overview

Risk management

• Conduct risk assessments using documentation, statistics, reports, market trends, and potential disruption impacts.
• Establish and maintain risk policies, procedures, registers, mitigation plans, impact analyses, and crisis response and recovery playbooks.
• Review risk protocols and mitigation plans, recommend improvements, and assess plan effectiveness.
• Recommend and implement risk treatments, including insurance, safety and security measures, continuity arrangements, and recovery measures.
• Help stakeholders set risk appetite and tolerance thresholds; provide organization-wide risk advice and assessment support.
• Prepare and present recommendations and proposals to executive leadership and produce monthly, quarterly, and annual risk reports.
• Maintain the organization's manual or software-based risk management system.
• Engage risk champions, keep risk registers current, monitor agreed actions, escalate overdue items, and promote risk ownership.

Business continuity and recovery

• Develop, maintain, review, and enhance business continuity and recovery plans and procedures.
• Conduct business impact analyses to identify dependencies, recovery priorities, and disruption impacts for departments and critical functions.
• Plan and oversee continuity and crisis management exercises across organizational levels and critical functions.
• Coordinate with IT on practices for protecting and restoring data and systems after disasters, cyber incidents, or other disruptions.
• Define recovery strategies that support acceptable operations when infrastructure is partly or fully unavailable.
• Document exercise scenarios, objectives, results, lessons learned, and corrective actions.

Training and coordination

• Develop and deliver enterprise risk management, business continuity, and disaster recovery training and awareness programs.
• Coordinate with Quality, Health, Safety and Security functions and relevant authorities to align emergency plans with applicable standards, regulations, and best practices.

Qualifications

• Bachelor's degree from an accredited college or university.
• Master's degree preferred.
• Six to ten years of general experience.
• Achieved or studying toward a professional certification in enterprise risk management.
• Proficiency in both English and Arabic.
• Able to analyze financial, technical, and operational data, write reports, and deliver presentations.
• Logical and systematic thinking and effective oral and written communication.