Job Title: Risk and Business Continuity Specialist
Location: Riyadh, KSA (with periodic site visits to project locations)
Key Responsibilities
Risk Management
Establish and maintain project and corporate risk registers across the projects
Facilitate risk identification workshops with project managers, engineering, procurement, and construction teams
Perform qualitative and quantitative risk analysis (probability/impact assessment, Monte Carlo simulation, schedule/cost risk analysis)
Integrate risk analysis with EVM and schedule performance data to flag emerging threats to cost, schedule, and quality
Review contract risk exposure (FIDIC-based EPC contracts, LDs, force majeure clauses, EOT triggers)
Support tender-stage risk assessments for new project bids
Track risk mitigation actions and report residual risk to management
Business Continuity Management
Develop, implement, and maintain the company’s Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP), aligned to ISO 22301
Conduct Business Impact Analyses (BIA) for critical project and corporate functions
Design and run BCP tabletop exercises and simulations; document lessons learned
Maintain emergency response and crisis management procedures for project sites
Coordinate with HSE, IT, legal, and insurance functions on continuity and resilience planning
Reporting & Governance
Prepare risk dashboards and KRIs for executive and client reporting
Maintain compliance with ISO 31000 (Risk Management) and ISO 22301 (BCM) frameworks
Support internal/external audits related to risk and continuity management
Liaise with insurers on project-specific coverage and claims support
Education
Experience
5–10 years of experience in risk management and/or business continuity, with a strong preference for candidates from EPC, construction, or infrastructure contracting backgrounds
Direct experience with energy (transmission, HVDC, substations) or water infrastructure projects in KSA is a strong advantage
Familiarity with FIDIC contract forms and EPC project structures
Certifications (applicable/relevant to KSA market)
PMI-RMP (Risk Management Professional) — preferred
ISO 31000 Risk Management certification
ISO 22301 Business Continuity Management certification, or CBCP/ CBCI (Certified Business Continuity Professional/Institute)
Technical Skills
Risk analysis software (Primavera Risk Analysis, RISK, or Active Risk Manager)
Working knowledge of Primavera P6 for schedule risk integration
Strong Excel/data analysis skills for KRI dashboards
