Manager, Risk & Business Continuity

Catrion; Jeddah; On-site; SAR 180,000 - 300,000; Full time

Job summary

Catrion is seeking a Risk & Business Continuity Manager to collaborate with department heads and the executive team to develop and implement plans addressing interruptions. You will oversee the enterprise risk management program, assess risks that could affect reputation, safety, security, or financial success, and lead preparedness across the organization.

Responsibilities include conducting risk assessments, maintaining policies and playbooks, aligning risk appetite, reporting to executives,

Responsibilities

• Conduct risk assessments by collecting and analyzing documentation, statistics, reports, market trends, and potential impacts from business disruptions.
• Establish and maintain enterprise risk management and business continuity policies, procedures, risk registers, mitigation plans, business impact analyses, and crisis response and recovery playbooks.
• Review risk management policies and protocols and recommend and implement improvements.
• Review and validate risk mitigation plans and assess their effectiveness.
• Recommend and implement appropriate risk treatments, including insurance, safety and security measures, business continuity arrangements, and recovery measures.
• Collaborate with key stakeholders to establish risk appetite and tolerance thresholds that support risk-based decision-making.
• Provide risk management advice and assessment support across the organization.
• Prepare and present risk reports, recommendations, and proposals to executive leadership.
• Develop, maintain, review, and enhance business continuity and recovery plans and procedures.
• Maintain the organization's risk management system, whether manual or software-based.
• Conduct business impact analyses for departments and critical functions to identify dependencies, recovery priorities, and disruption impacts.
• Plan, coordinate, and oversee business continuity and crisis management exercises involving all organizational levels and critical functions.
• Collaborate with IT to establish practices for protecting and restoring data and systems following disasters, cyber incidents, or other disruptions.
• Define and implement recovery strategies that enable the organization to operate at an acceptable level when infrastructure is partially or fully unavailable.
• Document exercise scenarios, objectives, results, lessons learned, and corrective actions.
• Develop and deliver training and awareness programs on enterprise risk management, business continuity, and disaster recovery.
• Coordinate with Quality, Health, Safety and Security functions and relevant authorities to align emergency management plans with applicable standards, regulations, and best practices.
• Engage risk champions to maintain accurate and current risk registers.
• Prepare monthly, quarterly, and annual enterprise risk management reports.
• Monitor agreed on risk and business continuity actions, elevate overdue items, and report implementation status.
• Promote risk ownership and process adherence across the organization through guidance and ongoing engagement.

Job description

Job Summery

The Risk & Business Continuity Manager will collaborate with department heads and the executive team to develop and implement plans to anticipate, address, and mitigate the effects of various business interruptions and oversee the organizations enterprise risk management program, assessing and identifying risks that could impede the reputation, safety, security, or financial success of the organization.

Job Description

1. Conduct risk assessments by collecting and analyzing documentation, statistics, reports, market trends, and potential impacts from business disruptions.
2. Establish and maintain enterprise risk management and business continuity policies, procedures, risk registers, mitigation plans, business impact analyses, and crisis response and recovery playbooks.
3. Review risk management policies and protocols and recommend and implement improvements.
4. Review and validate risk mitigation plans and assess their effectiveness.
5. Recommend and implement appropriate risk treatments, including insurance, safety and security measures, business continuity arrangements, and recovery measures.
6. Collaborate with key stakeholders to establish risk appetite and tolerance thresholds that support risk-based decision-making.
7. Provide risk management advice and assessment support across the organization.
8. Prepare and present risk reports, recommendations, and proposals to executive leadership.
9. Develop, maintain, review, and enhance business continuity and recovery plans and procedures.
10. Maintain the organization's risk management system, whether manual or software-based.
11. Conduct business impact analyses for departments and critical functions to identify dependencies, recovery priorities, and disruption impacts.
12. Plan, coordinate, and oversee business continuity and crisis management exercises involving all organizational levels and critical functions.
13. Collaborate with IT to establish practices for protecting and restoring data and systems following disasters, cyber incidents, or other disruptions.
14. Define and implement recovery strategies that enable the organization to operate at an acceptable level when infrastructure is partially or fully unavailable.
15. Document exercise scenarios, objectives, results, lessons learned, and corrective actions.
16. Develop and deliver training and awareness programs on enterprise risk management, business continuity, and disaster recovery.
17. Coordinate with Quality, Health, Safety and Security functions and relevant authorities to align emergency management plans with applicable standards, regulations, and best practices.
18. Engage risk champions to maintain accurate and current risk registers.
19. Prepare monthly, quarterly, and annual enterprise risk management reports.
20. Monitor agreed on risk and business continuity actions, elevate overdue items, and report implementation status.
21. Promote risk ownership and process adherence across the organization through guidance and ongoing engagement.