Specialist Risk Management And BCM

External Job Description

MAJOR DUTIES AND RESPONSIBILITIES

• Draft, review, and update the company's risk management and business continuity procedures, policies, and supporting documentation, ensuring they remain current and aligned with relevant regulations and standards (ISO 31000, ISO 22301) and the integrated management system's document-control governance.
• Support Business Impact Analyses (BIA); maintain updated documentation and reports on BIA findings.
• Support and maintain Business Continuity Plans (BCPs), Crisis Management Plans (CMPs), and Disaster Recovery Plans (DRPs), keeping them version-controlled and fit for purpose.
• Maintain the risk and BCM registers and related records, ensuring entries are current, owned, traceable, and reviewed at defined intervals.
• Support program compliance through regular engagement with process stakeholders, department owners/heads, and key stakeholders from the customer and relevant authorities, ensuring requirements are understood and reflected in procedures.
• Monitor implementation of the Risk and BCM Framework for AL TAIF and provide scheduled reports.
• Plan and conduct testing and exercising of plans; evaluate BCM performance and effectiveness, capture lessons learned, and drive corrective actions.
• Act as the first-level subject-matter expert (SME) for the company, providing guidance and advice to department owners and heads on risk and continuity matters.
• Support Risk and BCM Management System owner and top management decision making as front line SME.
• Provide regular updates to management and risk inputs into projects, processes, and decisions where required.
• Promote continual improvement of the Risk and BCM Framework and a proactive risk and resilience culture across the organization.
• Maintain the confidentiality and security of all company documentation.
• Perform additional duties as directed by the Senior Manager, Quality.
  
  

• Bachelor's degree in Engineering, Business, Risk Management, or a related discipline required.
• Minimum 5 years' experience in risk management and/or business continuity, preferably in defence, aerospace, manufacturing, or a regulated environment required.
• Working knowledge of ISO 31000 and ISO 22301; demonstrated experience developing BIA, BCPs, CMPs, and DRPs required.
• Experience in internal audit fundamentals and the IIA's IPPF (risk-based auditing, controls evaluation, audit reporting) required.
• Strong drafting, analytical, reporting, and stakeholder-management skills, with advanced MS Office proficiency (Word, Excel, Visio) and technical-writing ability required.
• Certification such as ISO 22301, ISO 31000 Risk Manager, Internal audit credential (IIA IAP or CIA), MoR, or related credential required.
• Experience within an integrated management system spanning multiple ISO standards, and familiarity with UAE regulatory and defence-sector localization requirements preferred.
• Subject-matter expertise, advisory capability, confidentiality, impartiality, and an internal-audit risk-and-controls mindset.
• Analytical thinking, sound judgment, and attention to detail in drafting and documentation.
• Communication, facilitation, and stakeholder engagement; organized, resilient, and composed under pressure.
• Advanced written and verbal English required; Arabic preferred.
• Valid UAE driver's license, or ability to obtain one.