Manager-Enterprise Risk Management

Abu Dhabi, United Arab Emirates | Posted on 05/06/2026

To establish, implement, and operationalize the organization’s Enterprise Risk Management (ERM) and Business Continuity Management (BCM) capabilities from the ground up – including frameworks, governance, tools, risk registers, BIA, continuity strategies, plans, training, exercises, and reporting – so the organization can manage uncertainties proactively and maintain operations during disruptions. This role requires ERM and BCM processes to be initiated, structured, and embedded into routine governance and decision-making.

Key Accountabilities & Responsibilities:

• Develop and implement the ERM Framework (policy, methodology, governance structure, roles, risk taxonomy, risk appetite concepts, escalation rules).
• Create and deploy ERM tools: risk register template, scoring methodology, heat maps, treatment plans, and reporting dashboards.
• Lead enterprise-wide risk identification workshops across business functions.
• Monitor and analyse risks across business functions and consolidate into an enterprise view.
• Establish risk treatment planning discipline and track mitigation progress with clear owners, due dates, and effectiveness checks.
• Provide key inputs into enterprise risk reporting and communicate risk status internally.
• Set up and run ERM governance rhythm: risk committee cadence, executive updates, and periodic refresh cycles.

Business Continuity Management (BCM)

• Develop and implement a BCM framework aligned to relevant expectations and organizational context (including local requirements where applicable).
• Define BCM governance: crisis management structure, roles, communications pathways, and plan ownership.
• Conduct and document BIA for all functions, including critical activities, RTO/RPO requirements (as applicable), dependencies, and recovery priorities.
• Develop contingency plans and recovery strategies for prioritized business processes.
• Work with IT to align BCM with disaster recovery expectations and clarify interplay between operational recovery and IT DR.
• Plan, conduct, and debrief regular disruption scenarios to test plan adequacy; maintain action logs and update plans regularly.
• Coordinate crisis management committee activities and readiness initiatives.

Capability Building & Embedding

• Develop training material and run awareness sessions for process owners, leadership, and response teams.
• Create "how to" guidance and SOPs so teams can sustain ERM/BCM independently.
• Establish lessons-learned mechanism following exercises/incidents to continuously mature the system.

Required Experience & Qualifications

• 7+ years in relevant business performance / risk / resilience roles in Medical Industry.
• Demonstrated experience standing up ERM and BCM programs.
• Strong facilitation experience for workshops (risk identification, BIA sessions, exercise facilitation).
• Bachelor’s degree in business or related discipline.
• Risk qualification such as CRMA or PMI-RMP (or equivalent).
• Knowledge of relevant local continuity expectations (e.g., NCEMA awareness).
• Familiarity with ERM and risk assessment standards/frameworks (e.g., ISO 31000/31010, COSO).
• Strong organizational and project management skills; ability to deliver under time pressure.
• Excellent stakeholder management and executive communication (board/leadership ready outputs).
• Strong analytical capability; capable of producing meaningful observations and recommendations.
• Advanced Microsoft Office skills; ability to build dashboards and structured reporting packs.