Risk & Business Continuity Manager (2022132) - Jeddah, المملكة العربية السعودية - Nahdi Medical Co.

وصف

Job Description

Manage the Enterprise Risk function and Business Continuity with the aim of strengthening the control environment by promoting a healthy risk culture. Support the Governance, Risk & Compliance (GRC) leadership team in defining and implementing the Governance, Risk & Compliance (GRC) strategy along with a robust implementation roadmap and presenting any identified risks/ shortcomings to the stakeholders.

Accountabilities

Support the GRC Leadership:

• Establish and develop overall Enterprise Risk Management (ERM) governance framework, scope and context including ERM Framework Risk Appetite Framework to ensure that Nahdi's risk assessment process is in line with leading standards and regulation.
• Establish and develop overall Business Continuity (BC) governance framework, scope and context Framework, Business Continuity (BC) Policies and Procedures, Business Impact Analysis process, Threat Risk Assessment categories, and BC Risk Appetite Framework, Business Continuity Strategy and Plans, to ensure that Nahdi's Business Continuity Management system is in line with leading standards and regulation.
• Raise the awareness for GRC and deliver live regular sessions to operational staff to facilitate improve GRC awareness at Nahdi.
• Support the Chief Corporate Governance & Business Support Officer (CGGB) and GRC Senior Department Manager in any incident management investigation or any other ad-hoc investigation requests by Executive Leadership Team to ensure adequate response to an incident.
  
  

Operational:

• Review all the risks identified by the stakeholder of different department Risk Champions and Risk Owners, ensuring all material risks are identified adequately.
• Identify emerging risks and recommend remedial actions to mitigate and control them.
• Engage the GRC Leadership, Senior Management, Risk Owners in discussions regarding events that could lead to potential losses or missed opportunities.
• Facilitate and conduct risk assessment workshops at regular intervals for the identification, assessment, management and monitoring of risks and accordingly performing risk analysis and evaluation.
• Support the Risk Owners in development and monitoring of departmental / functional Risk Register. To ensure proper ...
• Obtain approval on risk treatment plans from the Risk Owners and Senior Management, as required.
• Oversee the development of risk treatment plans with the Risk Owners. For action not completed escalate this to the GRC leadership.
• Monitor adherence to and effectiveness of the risk management processes and procedures within Nahdi Medical Company and escalate to the GRC Senior Department Manager if material deviations continue or recur.
• Prepare the initial draft for risk reports (for Executive and Non-Executive management) for GRC Senior Department Manager review and address comments
  
  

Cross Functional Management:

• Monitor the Risk Champions in each department for Risk and Business Continuity (BC) activities. This will include but not limited to supporting the Risk and BC function in completing their respective duties such as identification risks and controls, reviewing the treatment plans and arranging training when required.
• Manage the consultants and coordinate with the business for conducting risk assessments, business impact analysis (BIA) and developing business continuity plans.
• Manage the updates on risk register and business impact analysis (BIA) document on an ongoing basis to ensure it is up to date.
• Keep abreast of key developments in the ERM and BC industry and latest standards, methodologies and techniques. In addition, ensure and promote risk culture across all business units.
  
  

Staff Management:

• Monitor the performance of the Direct Reports through monitoring the KPIs achievement, coaching, following up any obstacles, provide performance feedback and conversations, to ensure the achievement of the set objectives.
• Guide junior staff members to promote their development.
  
  

Employee's duties are not limited only to the above-mentioned Accountabilities; he/she may perform other duties as assigned.

Work Environment

• Indoors : 90%
• Outdoors : 10%
• Working Days : 5 Working Days
• Days off : 2 Days Off
• Working Hours : 8:00 AM – 5:00 PM (1 hour break)
  
  

Job Requirement

Education

• Bachelor degree
• Preferred – Masters degree or CPA /any other appropriate professional certification such as CMA or ACCA
  
  

Experience

• 5+ Years of Experience in Risk Management or GRC function
• 2 Years of Managerial Experience
• Previous work experience in risk advisory function of a multinational organization or with one of the top 4 auditing entities (PWC, EY, KPMG, Deloitte) or from well reputed leading organization. Extensive knowledge and exposure to enterprise risk management ink line with ISO 31000 and COSO frameworks. Previous internal audit experience is a plus.
• Preferred – Business Continuity implementation experience in a reputed organization,
• Certification in Risk Management (preferred)
  
  

Computer Skills

• MS Office Suite (Word, Excel and PowerPoint)
  
  

Languages

• English
• Arabic