Senior Risk Analyst

Job PurposeThe Senior Risk Analyst supports the development, implementation and continuous improvement of the Group's Enterprise Risk Management (ERM) and Resilience Frameworks. The role is responsible for facilitating risk identification, assessment, monitoring and reporting activities across the Group while supporting the design, implementation and maturity enhancement of resilience capabilities including Incident Management, Crisis Management, Business Continuity Management (BCM), IT Disaster Recovery (ITDR), Operational Resilience, Testing & Exercising, and Resilience Governance. The role works closely with business stakeholders to strengthen risk and resilience culture, enhance preparedness for disruptive events.Essential Roles and ResponsibilitiesFunctional Roles and Responsibilities Assist the Associate Director – Group Risk in delivering ERM responsibilities and maintaining an effective risk management process across the Group.Facilitate risk identification, assessment, treatment, monitoring and reporting activities across business units and corporate functions.Develop and maintain risk registers, risk profiles, dashboards and management information to support effective decision-making.Support the development, maintenance and monitoring of the Group’s risk appetite framework, including risk appetite statements, limits and escalation thresholds.Monitor key risk indicators, emerging risks and management action plans, escalating concerns where appropriate.Support third-party dependency and concentration risk assessments, including monitoring related vulnerabilities and management actions.Prepare periodic and ad hoc risk reports, presentations and insights for senior management.Support the development, maintenance and periodic review of incident and crisis management playbooks, procedures and supporting documentation.Support the development of business impact analyses and resilience assessments to identify critical services, dependencies, vulnerabilities and recovery requirements.Support the development, review and maintenance of Business Continuity Plans, Crisis Management Plans and IT Disaster Recovery Plans across the Group.Coordinate and facilitate resilience testing and exercising activities, including tabletop exercises, crisis simulations, business continuity tests and disaster recovery exercises.Prepare periodic and ad hoc resilience reports, presentations and insights for senior management.Support in build and maintain effective relationships with business leaders and risk owners to support the consistent adoption of risk and resilience practices across the Group.Job RequirementsEducation/Certification and Continued EducationBachelor‘s degree or Master‘s degree in Business, Finance, Accounting or Economics.Relevant professional certifications in Enterprise Risk Management, Business Continuity, Operational Resilience, Crisis Management, Information Security or Audit (e.g., IRM, PMI-RMP, CBCI/MBCI, CBCP, ISO 22301, CRISC, CISA or equivalent) are preferred, along with a commitment to continuous professional development.Years of Experience 5-8 years of experience in risk management, resilience, business continuity or operational risk.Experience in risk assessments, resilience programmes, incident management, crisis management, business continuity, reporting and stakeholder engagement within complex organisations is preferred.Knowledge and Skills Demonstrated experience working with enterprise risk management frameworks and supporting the development and implementation of risk policies, frameworks, methodologies and governance processes.Knowledge of Incident Management, Crisis Management, Business Continuity Management (BCM), IT Disaster Recovery (ITDR) and Operational Resilience principles and practices.Understanding of Business Impact Analysis (BIA), critical business services, dependency mapping, Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).Knowledge of relevant standards and leading practices, including ISO 31000, ISO 22301 and other applicable risk and resilience frameworks.Strong analytical, problem-solving and quantitative skills, with the ability to assess, analyse and interpret complex risk and resilience information.Experience facilitating workshops, risk assessments, resilience exercises, tabletop simulations and stakeholder engagements across multiple business functions.Strong project management and organisational skills, including planning, prioritisation, stakeholder coordination and delivery against tight deadlines.Skilled in the use of Microsoft Office applications and familiarity with risk management systems, data analytics, dashboarding and reporting tools.Strong communication, presentation and report-writing skills, with the ability to clearly communicate complex risk and resilience matters to senior stakeholders.Ability to operate effectively within a diverse, fast-paced and dynamic business environment.LanguagesProficiency in English; Arabic is an advantage.