Risk & BCM Lead

Binladin International Holding Group; Jeddah; On-site; SAR 300,000 - 460,000; Full time

Job summary

Binladin International Holding Group seeks a senior Risk & BCM Lead to develop, implement and operate enterprise risk management and business continuity programs across the Group and its verticals.

The role provides day-to-day technical coordination for risk assessments, risk registers, treatment plans, and management reporting, while collaborating with risk champions, coordinators, and external advisors to ensure consistent application of Group standards.

Qualifications

• Bachelor-level degree required in risk management, business administration, engineering, finance, emergency management or related field.
• 5–6 years of professional experience with at least 4 years in enterprise risk management and/or business continuity, preferably in a large/complex group.
• Fluency in English and Arabic.
• Certifications such as RIMS-CRMP, IRM, CRMA, ISO 31000, CBCI, CBCP, ISO 22301 Lead Implementer/Auditor are highly preferred.
• PMP, PRINCE2, or other recognized GRC certifications provide additional advantage.

Responsibilities

• Execute the approved ERM framework, policy, methodology, risk taxonomy, and risk appetite under the Risk & BCM Director.
• Facilitate enterprise, functional, project, and vertical risk assessments; maintain risk registers, treatment plans, KRIs, controls, and actions.
• Review and challenge risk ratings, treatment adequacy, action ownership, and target dates; escalate overdue matters.
• Monitor incidents, emerging risks, and control weaknesses; prepare analysis and recommendations for management.
• Execute the BCM framework, standards, and lifecycle in line with ISO 22301 principles.
• Coordinate business impact analyses, continuity risk assessments, recovery strategies, and continuity plans.
• Plan and facilitate BCM exercises and tests, document lessons learned, track remediation actions to closure.
• Prepare risk & BCM dashboards, reports, and management decision materials.
• Monitor compliance and track actions, exceptions, and overdue deliverables.
• Maintain risk data, documentation, and evidence repositories for auditability.
• Support internal and external audits and cross-functional coordination.
• Provide guidance to functions, run workshops, and drive implementation of Risk & BCM requirements.
• Deliver awareness and training; coordinate network of risk champions and BCM coordinators.
• Lead workstreams and coordinate analysts or consultants.

Skills

Risk management

Business continuity

Stakeholder management

GRC knowledge

Leadership

Education

Bachelor's degree in Risk Management, Business Administration, Engineering, Finance, Emergency Management, or related field

Master’s degree (plus)

Job description

The Risk & BCM Lead is a senior individual contributor role within the Governance, Risk & Compliance (GRC) function, supporting the development, implementation, and continuous operation of enterprise risk management and business continuity programs across the Group and its business verticals. The role provides day-to-day technical coordination for risk assessments, risk registers, treatment plans, business impact analyses, continuity plans, exercises, and management reporting. The role requires a strong risk and continuity professional with the ability to work closely with functions, vertical focal points, risk champions, BCM coordinators, and external advisors to promote consistent application of Group standards.

Key Responsibilities

• Execute the approved ERM framework, policy, methodology, risk taxonomy, and risk appetite under the direction of the Risk & BCM Director.
• Facilitate enterprise, functional, project, and vertical risk assessments, and maintain risk registers, treatment plans, KRIs, controls, and action records.
• Review and constructively challenge risk ratings, treatment adequacy, action ownership, and target dates, escalating material or overdue matters as needed.
• Monitor incidents, emerging risks, and control weaknesses, and prepare practical analysis and recommendations for management.

2. Business Continuity & Operational Resilience

• Execute the BCM framework, policy, standards, and lifecycle requirements in alignment with ISO 22301 principles and Group expectations.
• Coordinate business impact analyses, continuity risk assessments, recovery strategies, and business continuity plans, aligned with crisis management and IT disaster recovery.
• Plan and facilitate BCM exercises and tests, document lessons learned, and track remediation actions through to closure.

3. Governance, Reporting & Assurance

• Prepare Risk & BCM dashboards, reports, and decision-support materials for the Risk & BCM Director and management forums.
• Monitor compliance with Risk & BCM requirements and track management actions, exceptions, and overdue deliverables.
• Maintain accurate Risk & BCM data, documentation, and evidence repositories to support traceability and auditability.
• Support internal and external audits, assessments, and cross-functional coordination with GRC, Internal Audit, Cybersecurity, IT, HSE, Legal, HR, and Finance.

4. Stakeholder, Culture & Team Coordination

• Provide practical guidance to functions and verticals, facilitate workshops, and support implementation of Risk & BCM requirements.
• Deliver awareness and training activities and coordinate the Group network of risk champions and BCM coordinators.
• Lead assigned workstreams, coordinate analysts or consultants, and elevate delivery issues to the Risk & BCM Director.

Qualifications and Experience

• Bachelor's degree in Risk Management, Business Administration, Engineering, Finance, Emergency Management, or a related field. Master’s degree is a plus.
• 5–6 years of professional experience, including at least 4 years of hands‑on experience in enterprise risk management and/or business continuity, preferably within a large or complex group.
• Demonstrated experience in risk assessments, risk registers, business impact analysis, continuity planning, exercises, and management reporting.
• Professional fluency in English and Arabic.
• RIMS-CRMP, IRM, CRMA, ISO 31000, CBCI, CBCP, ISO 22301 Lead Implementer/Auditor, or an equivalent certification (highly preferred).
• PMP, PRINCE2, or other recognized GRC certification (additional advantage).