Consultants in enterprise risk and business continuity management | Multiple Roles | Onsite | 24 month contract

Consultants in enterprise risk and business continuity management (Multiple roles)​Due Date for Profiles: 23 September 2026, 6:00 pm UAE TimeExpected Start Date: 1 November 2026Expected End Date: 1 November 2028​Project Location: Saudi Arabia, KSA​Level of Experience:

• Director (15 to 20 years)
• Senior Manager (10 to 15 years)
• Manager (5 to 10 years)
• Senior Consultant/Consultant (Under 5 years)​Utilization per Week: Full-time - 5 days per weekExpected Duration: 24 monthsWork Arrangement: Onsite​Must-Have Experience and Skills for Acceptance:
• Experience level for Senior Manager/Director level role: Minimum of 12 years in enterprise risk and business continuity, including 10 years in Saudi Arabia
• Experience level for Manager level role: Minimum of 8 years in enterprise risk and business continuity, including 5 years in Saudi Arabia
• Experience level for Consultant/Senior Consultant level role: Minimum of 4 years enterprise risk and business continuity in Saudi Arabia
• High fluency in Arabic and English, must be able to author deliverables in both languages.
• Experience with the Saudi Digital Government Authority, National Risk Council (GSNRC) and National Cybersecurity Authority requirements.
• Risk certification in at least one of the following: IRM International Diploma, RIMS-CRMP, CRISC, ISO 31000 Lead Risk Manager
• Business continuity certification in at least one of the following: MBCI/CBCI, DRI CBCP/MBCP, ISO 22301 Lead Implementer or Auditor
• Full-time onsite presence in Saudi Arabia (Visa sponsorship available where needed).​Scope of Work:
• Programme overview: A consulting firm is seeking applications for experienced consultants on a bid to support a Saudi government entity based in Riyadh, for a 24-month enterprise risk management and business continuity programme. Hiring will be subject to contract award.
• Deliverables: The scope of work includes delivering:
• ERM methodology and governance framework
• 32 departmental risk registers
• ERM KRIs and dashboards, risk appetite, third-party risk
• BCM business impact analysis, continuity strategies, crisis management and communication plans, consolidated BCP/DRP, response plans and exercises.
• Resourcing requirements: The resourcing requirements will be for multiple consultants and will include:
• Senior Manager/Director-level consultant (Min. 15 years of experience)
• Manager-level consultants (Min. 8 years of experience)
• Senior consultant/Consultant-level (Min. 4 years of experience)
• Note on visa sponsorship and eligibility: Non-Saudi Applicants should either be self-sponsored through their own LLC or can apply for sponsorship through the consulting firm leading the bid, subject to immigration and security screening approval.​Sector / Industry Experience:
• Management Consulting (strategy, operations, transformation)
• Public Sector / Government
• Enterprise Risk Management (ERM) and Business Continuity Management (BCM)​Education Level: Postgraduate Degree, Undergraduate DegreeSpecific Client or Work Experience: Experience with the Saudi Digital Government Authority, National Risk Council (GSNRC) and National Cybersecurity Authority requirements.​Other Certifications & Qualifications:
• Risk certification in at least one of the following: IRM International Diploma, RIMS-CRMP, CRISC, ISO 31000 Lead Risk Manager
• Business continuity certification in at least one of the following: MBCI/CBCI, DRI CBCP/MBCP, ISO 22301 Lead Implementer or Auditor
• Information security certification: CISM, CISSP​Specific Geographic Experience: Experience in Saudi Arabia is a mustAdditional Language Requirements: High fluency in Arabic and English, must be able to author deliverables in both languages.