Risk & BCM Manager

Boutique Group; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

Boutique Group is seeking an experienced professional to lead enterprise risk management and business continuity across its luxury hospitality portfolio in Saudi Arabia. The role focuses on building resilient risk frameworks, conducting comprehensive assessments, and guiding strategic decision-making.

You will work with senior leaders to implement policies, monitor KPIs, and develop awareness initiatives, ensuring alignment with corporate objectives and regulatory requirements.

Qualifications

• Bachelor’s Degree in Business Administration or any related discipline.
• 4-8 years of experience in related area, including 3 years at a management level.
• Experience developing, implementing, and improving risk and BCM policies, frameworks, and procedures.

Responsibilities

• Develop and execute the annual Risk and BCM work plan with KPIs.
• Manage direct reports and promote knowledge sharing across Risk and BCM.
• Prepare and monitor the assigned area's budget within approved guidelines.
• Oversee enterprise risk assessments covering strategic, operational, financial, compliance and other risks.
• Lead the BCM framework, governance, plans, and recovery strategies.
• Coordinate with IT and business owners on alignment of disaster and cyber recovery priorities.
• Deliver risk and BCM dashboards, reports, and management updates.

Skills

Risk management

Business continuity

Leadership

Compliance

Education

Bachelor’s Degree in Business Administration or related discipline

Job description

About Boutique Group

Boutique Group is redefining luxury hospitality by transforming Saudi Arabia’s most iconic historic and cultural palaces into ultra-luxury boutique hotels. With a commitment to storytelling, authenticity, and excellence, curating exceptional hospitality experiences that celebrate the Kingdom’s rich history while setting new benchmarks in the industry. Boutique Group’s growing portfolio includes The Red Palace, Al Hamra Palace, and Tuwaiq Palace, each being meticulously restored to preserve its historical significance while being reimagined for contemporary of ultra-luxury hospitality.

At Boutique Group, we lead the way in redefining what’s possible. Taking the exquisite, making it extraordinary, we are a culture that celebrates transformation. A young company for a youthful nation, our energy is honed and harnessed by the mentorship of hospitality’s leading names. Here, you can be part of something bigger, crafting luxury hospitality’s next chapter.

Job Purpose:

To manage the development and implementation of Boutique Group's enterprise risk management and business continuity frameworks, enabling informed decision-making and organizational resilience through systematic risk identification, assessment, treatment, business impact analysis, continuity planning, exercising, and continual improvement.

Key Accountabilities:

Operational Plans

• Contribute to the development and execution of the Risk, Security and Resilience department's short- to mid-term plans, ensuring alignment with functional priorities and corporate objectives.
• Develop and execute the annual Risk and BCM work plan, priorities, milestones, and performance indicators for the assigned area.
• Monitor performance against approved plans and KPIs, identify gaps, and recommend corrective and continual-improvement actions.

People Management

• Manage the activities and performance of direct reports, where applicable, ensuring efficient delivery in line with approved plans, policies, and procedures.
• Identify capability needs, support team development, and promote knowledge sharing across Risk and BCM stakeholders.

Budgeting and Financial Planning

• Prepare and recommend the assigned area's budget, monitor expenditure against the approved budget, and ensure activities are delivered within approved financial guidelines.

Policies, Systems, Processes, Procedures and Standards

• Develop, maintain, and continually improve Risk and BCM policies, frameworks, methodologies, procedures, tools, and records in line with Boutique Group's strategy, risk appetite, applicable requirements, and recognized standards.
• Ensure compliance with approved policies and governance requirements, address audit and assurance findings, and maintain reliable evidence of implementation.

Risk Management

• Facilitate enterprise and functional risk assessments covering strategic, operational, financial, compliance, reputational, project, third-party, and emerging risks, and maintain the enterprise risk register and risk profile.
• Apply consistent risk taxonomy, assessment criteria, scoring, key risk indicators, appetite thresholds, and escalation triggers across the organization.
• Partner with risk owners to define appropriate risk responses and controls, evaluate residual exposure, and monitor risk treatment plans through to closure.
• Analyze risk trends, concentrations, interdependencies, incidents, and loss events, translating findings into practical recommendations for management decision-making.
• Provide risk advice for strategies, projects, major changes, contracts, and new initiatives, and promptly escalat material exposures or breaches of risk appetite.
• Assess risks arising from key suppliers, vendors, and other third parties, coordinating mitigation and monitoring with relevant business owners.
• Oversee the organization's insurance program, including assessment of coverage needs, policy reviews, claims trends, and coordination with insurance brokers and providers to support appropriate and cost-effective protection.
• Develop and deliver risk awareness initiatives that strengthen accountability and embed a proactive risk culture across Boutique Group.

Business Continuity Management

• Develop, implement, maintain, and continually improve the BCM framework, governance model, lifecycle, plans, procedures, and supporting tools in line with recognized business continuity standards and applicable requirements.
• Lead business impact analyses and continuity risk assessments to identify critical activities, dependencies, disruption impacts, minimum resource requirements, maximum tolerable periods of disruption, and recovery objectives.
• Work with business units to define practical continuity and recovery strategies covering people, facilities, technology, information, critical suppliers, and alternate operating arrangements.
• Coordinate the preparation, review, approval, and controlled maintenance of business continuity, incident response, crisis management, and recovery plans, with clear roles, escalation paths, and communication protocols.
• Coordinate with IT and relevant business owners to align disaster recovery and cyber recovery capabilities with approved business recovery priorities and recovery time and recovery point objectives.
• Establish and deliver a risk-based exercising and testing program, including call-tree tests, tabletop exercises, simulations, and recovery tests; document results and track corrective actions to closure.
• Assess continuity arrangements for critical suppliers and service providers and coordinate remediation where third-party resilience does not meet Boutique Group's requirements.
• Support coordinated response, continuity activation, recovery, and return-to-normal activities during disruptive incidents, and lead post-incident reviews to capture lessons and improve plans.
• Deliver BCM training and awareness programs and maintain accurate, current, accessible records of plans, exercises, incidents, recovery procedures, and improvement actions.

Reporting

• Prepare accurate and timely Risk and BCM dashboards, reports, and management updates covering exposures, treatment progress, preparedness, exercises, incidents, and improvement actions.
• Provide clear analysis and recommendations to the GRC Director, senior management, and relevant governance committees, and support regulatory or stakeholder reporting as required.

Qualifications:

Education: Bachelor’s Degree in Business Administration or any related discipline

Experience:

4-8 years of Experience in any related area out of which 3 years at a management level.