Risk Specialist

Role Overview

This position is responsible for supporting the effective execution and continuous improvement of the Group's Risk Management and Business Continuity Management Systems (BCMS). It ensures consistent identification, evaluation, reporting of risks, and readiness for business continuity through strong collaboration with stakeholders, thorough analytics, and disciplined application of risk and BCMS protocols.

Key Responsibilities

• Facilitate identification, assessment, measurement, and documentation of risks across the Group and its subsidiaries.
• Embed and apply established Enterprise Risk Management (ERM) methodologies, tools, templates, and techniques in daily risk-related activities.
• Assist in implementing and upholding the Group ERM framework, policies, procedures, and standards.
• Ensure consistent application with COSO ERM and ISO 31000 standards, identifying any gaps or discrepancies.
• Facilitate and document regular risk workshops involving subsidiaries, functions, and Risk Champions.
• Provide practical guidance to Management and Risk Champions on risk identification, assessment, treatment, monitoring, and use of risk management tools and scoring methods.
• Review risk registers to challenge completeness, consistency, clarity in risk articulation, cause-effect relationships, and scoring accuracy.
• Monitor emerging and strategic risks for identification and assessment.
• Track risk ownership and escalate any unclear or weak accountabilities.
• Evaluate risk mitigation and treatment plans for adequacy, practicality, timeliness, and clear ownership.
• Monitor and report progress on risk enhancement and remediation initiatives across subsidiaries.
• Escalate overdue actions, worsening risks, and critical concerns promptly.
• Develop and maintain dashboards and analytics systems, including Power BI and Governance, Risk & Compliance (GRC) platforms.
• Prepare periodic ERM reporting packages for management and committees.
• Support Group BCM framework deployment aligned to ISO 22301 and regulatory mandates.
• Monitor subsidiaries' compliance with BCM policies, standards, and governance obligations.
• Support establishment and effective operation of BCM governance frameworks.
• Assist subsidiaries in analyzing critical business processes, key dependencies, supply chain vulnerabilities, and crisis scenarios.
• Oversee development, upkeep, and periodic review of Business Continuity Plans (BCPs).
• Coordinate and supervise BCM testing, simulations, and crisis drills.
• Analyze test results, identify deficiencies, and track corrective action resolution.
• Compile BCM readiness and gap assessments including tracking of unresolved issues.

Qualifications and Experience

• Strong familiarity with internationally recognized risk management frameworks including ISO 31000 and COSO ERM.
• Excellent communication, interpersonal, and presentation skills to collaborate effectively at all organizational levels.
• Skilled in facilitating workshops, simplifying risk concepts into understandable language, and preparing concise reports and presentations.
• Strong analytical skills to interpret risk data, detect trends, inconsistencies, and control weaknesses.
• Sound judgment with risk-based thinking to generate actionable, proportionate recommendations to improve controls, processes, and risk reporting quality.
• Extensive practical experience in Business Continuity Management Systems, including knowledge of ISO 22301 principles, business impact analysis, continuity tactics, crisis handling, and BCP/DRP design, implementation, testing, and improvement.
• Bachelor's degree in business, risk management, accounting, finance, or a related field.
• 5 or more years’ experience in business consultancy, project management, business process reviews, risk management, or BCMS roles.
• Experience with a Big Four firm focused on risk management is advantageous.
• Familiarity with regulatory and compliance frameworks, preferably in the Kingdom of Saudi Arabia.
• Proficiency in Microsoft Excel, Word, PowerPoint, Visio, and Power BI; SAP experience is a plus.

Location

Riyadh, Saudi Arabia