Abu Dhabi, United Arab Emirates | Posted on 05/06/2026
To establish, implement, and operationalize the organization’s Enterprise Risk Management (ERM) and Business Continuity Management (BCM) capabilities from the ground up – including frameworks, governance, tools, risk registers, BIA, continuity strategies, plans, training, exercises, and reporting – so the organization can manage uncertainties proactively and maintain operations during disruptions. This role requires ERM and BCM processes to be initiated, structured, and embedded into routine governance and decision-making.
Key Accountabilities & Responsibilities:
- Develop and implement the ERM Framework (policy, methodology, governance structure, roles, risk taxonomy, risk appetite concepts, escalation rules).
- Create and deploy ERM tools: risk register template, scoring methodology, heat maps, treatment plans, and reporting dashboards.
- Lead enterprise-wide risk identification workshops across business functions.
- Monitor and analyse risks across business functions and consolidate into an enterprise view.
- Establish risk treatment planning discipline and track mitigation progress with clear owners, due dates, and effectiveness checks.
- Provide key inputs into enterprise risk reporting and communicate risk status internally.
- Set up and run ERM governance rhythm: risk committee cadence, executive updates, and periodic refresh cycles.
Business Continuity Management (BCM)
- Develop and implement a BCM framework aligned to relevant expectations and organizational context (including local requirements where applicable).
- Define BCM governance: crisis management structure, roles, communications pathways, and plan ownership.
- Conduct and document BIA for all functions, including critical activities, RTO/RPO requirements (as applicable), dependencies, and recovery priorities.
- Develop contingency plans and recovery strategies for prioritized business processes.
- Work with IT to align BCM with disaster recovery expectations and clarify interplay between operational recovery and IT DR.
- Plan, conduct, and debrief regular disruption scenarios to test plan adequacy; maintain action logs and update plans regularly.
- Coordinate crisis management committee activities and readiness initiatives.
Capability Building & Embedding
- Develop training material and run awareness sessions for process owners, leadership, and response teams.
- Create "how to" guidance and SOPs so teams can sustain ERM/BCM independently.
- Establish lessons-learned mechanism following exercises/incidents to continuously mature the system.
Requirements
Required Experience & Qualifications
- 7+ years in relevant business performance / risk / resilience roles in Medical Industry.
- Demonstrated experience standing up ERM and BCM programs.
- Strong facilitation experience for workshops (risk identification, BIA sessions, exercise facilitation).
- Bachelor’s degree in business or related discipline.
- Risk qualification such as CRMA or PMI-RMP (or equivalent).
- Knowledge of relevant local continuity expectations (e.g., NCEMA awareness).
- Familiarity with ERM and risk assessment standards/frameworks (e.g., ISO 31000/31010, COSO).
- Strong organizational and project management skills; ability to deliver under time pressure.
- Excellent stakeholder management and executive communication (board/leadership ready outputs).
- Strong analytical capability; capable of producing meaningful observations and recommendations.
- Advanced Microsoft Office skills; ability to build dashboards and structured reporting packs.