Key Deliverables

Required Qualifications and Experience

Core Competencies

• Review organisational structure, critical services, existing continuity arrangements, policies, and risk information.
• Identify applicable legal, regulatory, contractual, and stakeholder requirements related to business continuity.
• Develop and maintain the BCM Framework, covering governance, roles and responsibilities, scope, lifecycle, reporting, and continual improvement.
• Develop the Business Continuity Policy and define BCM objectives, responsibilities, and review requirements.
• Plan and facilitate BCM workshops and interviews with business units, process owners, and key stakeholders.
• Lead the Business Impact Analysis (BIA) to identify critical activities, dependencies, impacts, recovery priorities, and recovery objectives.
• Conduct Business Continuity Risk Assessments, identifying disruption scenarios, vulnerabilities, existing controls, and treatment actions.
• Develop the Business Continuity Strategy, including recovery options, resource requirements, dependencies, and recommendations.
• Develop, review, and validate Business Continuity Plans (BCPs) covering activation, escalation, roles, communication, response, recovery, and return-to-normal activities.
• Develop BCM templates, tools, and supporting documentation.
• Deliver BCM awareness sessions and workshops for relevant stakeholders.
• Present deliverables to management and incorporate stakeholder feedback.
• Design and facilitate tabletop exercises, simulations, and other continuity exercises based on an annual or periodic exercise programme.
• Prepare BCM Exercise Reports covering observations, strengths, gaps, lessons learned, and corrective actions.
• Prepare BCM Monitoring and Performance Reports covering implementation progress, BCP status, exercise results, outstanding actions, and improvement priorities.
• Track corrective actions and support business owners in updating BCPs and related documentation.
• Maintain document control, version management, and records of workshops, exercises, validations, and management decisions.
• Provide knowledge transfer and coaching to designated client personnel to build sustainable BCM capability.
• Business Continuity Management Framework
• Business Continuity Policy
• Business Impact Analysis (BIA)
• Business Continuity Risk Assessment
• Business Continuity Strategy
• Business Continuity Plans (BCPs)
• BCM Templates and Forms
• BCM Awareness Sessions and Workshops
• BCM Exercises and Simulations
• BCM Exercise Reports
• BCM Monitoring and Performance Reports
• Corrective Action and Continual Improvement Recommendations
• Bachelor's degree in Business Continuity, Risk Management, Emergency Management, Business Administration, Information Technology, Engineering, or a related discipline.
• Minimum 7 years of relevant BCM experience.
• Proven experience developing and implementing BCM frameworks, policies, and business continuity plans.
• Hands-on experience in BIA, Business Continuity Risk Assessment, Business Continuity Strategy, BCPs, BCM exercises and simulations, and stakeholder workshops.
• Experience preparing executive-level reports and presenting recommendations to senior management.
• Strong knowledge of ISO 22301:2019, ISO 22313, and the 2024 amendment to ISO 22301.
• Experience working within complex, multi-department organisations.
• Experience in Saudi Arabia or the GCC is highly preferred.
• Professional BCM certification such as CBCI or MBCI is preferred.
• ISO 22301 Lead Implementer or Lead Auditor certification is an advantage.
• Arabic language capability is an advantage.
• Stakeholder management and workshop facilitation.
• Ability to translate business processes, critical activities, and dependencies into practical recovery requirements.
• Excellent written and verbal English communication skills.
• Strong report writing and presentation skills.
• Planning, coordination, and document management.
• Analytical and problem-solving ability with strong attention to detail.
• Ability to communicate BCM concepts to both technical and non-technical audiences.