Risk & BCM Lead

The Risk & BCM Lead is a senior individual contributor role within the Governance, Risk & Compliance (GRC) function, supporting the development, implementation, and continuous operation of enterprise risk management and business continuity programs across the Group and its business verticals. The role provides day-to-day technical coordination for risk assessments, risk registers, treatment plans, business impact analyses, continuity plans, exercises, and management reporting.

The role requires a strong risk and continuity professional with the ability to work closely with functions, vertical focal points, risk champions, BCM coordinators, and external advisors to promote consistent application of Group standards.

• Execute the approved ERM framework, policy, methodology, risk taxonomy, and risk appetite under the direction of the Risk & BCM Director.
• Facilitate enterprise, functional, project, and vertical risk assessments, and maintain risk registers, treatment plans, KRIs, controls, and action records.
• Review and constructively challenge risk ratings, treatment adequacy, action ownership, and target dates, escalating material or overdue matters as needed.
• Monitor incidents, emerging risks, and control weaknesses, and prepare practical analysis and recommendations for management.

• Execute the BCM framework, policy, standards, and lifecycle requirements in alignment with ISO 22301 principles and Group expectations.
• Coordinate business impact analyses, continuity risk assessments, recovery strategies, and business continuity plans, aligned with crisis management and IT disaster recovery.
• Plan and facilitate BCM exercises and tests, document lessons learned, and track remediation actions through to closure.

• Prepare Risk & BCM dashboards, reports, and decision-support materials for the Risk & BCM Director and management forums.
• Monitor compliance with Risk & BCM requirements and track management actions, exceptions, and overdue deliverables.
• Maintain accurate Risk & BCM data, documentation, and evidence repositories to support traceability and auditability.
• Support internal and external audits, assessments, and cross-functional coordination with GRC, Internal Audit, Cybersecurity, IT, HSE, Legal, HR, and Finance.

• Provide practical guidance to functions and verticals, facilitate workshops, and support implementation of Risk & BCM requirements.
• Deliver awareness and training activities and coordinate the Group network of risk champions and BCM coordinators.
• Lead assigned work streams, coordinate analysts or consultants, and elevate delivery issues to the Risk & BCM Director.

• Bachelor's degree in Risk Management, Business Administration, Engineering, Finance, Emergency Management, or a related field. Master’s degree is a plus.
• 5–6 years of professional experience, including at least 4 years of hands‑on experience in enterprise risk management and/or business continuity, preferably within a large or complex group.
• Demonstrated experience in risk assessments, risk registers, business impact analysis, continuity planning, exercises, and management reporting.
• Professional fluency in English and Arabic.
• RIMS-CRMP, IRM, CRMA, ISO 31000, CBCI, CBCP, ISO 22301 Lead Implementer/Auditor, or an equivalent certification (highly preferred).
• PMP, PRINCE2, or other recognized GRC certification (additional advantage).