We are seeking a Senior Business Continuity & Disaster Recovery Consultant to lead the design, implementation, and certification of Business Continuity Management Systems (BCMS) in alignment with ISO 22301.
This role requires hands-on experience across BCMS implementation, disaster recovery (IT), crisis management, and regulatory compliance within Saudi Arabia.
Key Responsibilities
1. BCMS Implementation & ISO 22301 Compliance
- Lead end-to-end BCMS implementation aligned with ISO 22301
- Conduct gap assessments and maturity evaluations
- Develop BC policies, frameworks, and procedures
- Support certification readiness and audit processes
2. Business Impact Analysis & Risk Assessment
- Conduct Business Impact Analysis (BIA) across business units
- Identify critical processes, dependencies, and recovery priorities
- Perform risk assessments aligned with enterprise risk frameworks
3. Disaster Recovery Planning (IT Focus)
- Design and implement Disaster Recovery (DR) strategies
- Define RTO, RPO, and recovery architectures
- Coordinate with IT teams on backup, replication, and failover solutions
- Ensure alignment between BC and IT DR plans
4. Strategy & Governance
- Develop BC strategies and roadmaps
- Establish governance structures and roles
- Define crisis management and incident response frameworks
5. Testing & Exercising
- Plan and conduct BC/DR exercises (tabletop, simulations, technical tests)
- Evaluate effectiveness and drive continuous improvement
6. Awareness & Training
- Deliver workshops and awareness sessions
- Train stakeholders on BC/DR procedures and crisis response
7. Regulatory Compliance (Saudi Arabia)
- Ensure alignment with DGA, SAMA, and national frameworks
- Support compliance with NCA, ISO 27001, ITIL, and COBIT standards
Required Qualifications
- Bachelor’s or Master’s degree in IT, Risk Management, Business Administration, or related field
- 4–10 years of experience in Business Continuity & Disaster Recovery
- Proven hands-on experience implementing ISO 22301
- Experience in consulting/advisory roles is highly preferred
- Strong understanding of IT infrastructure, cloud, and DR technologies
Preferred Certifications
- ISO 22301 Lead Implementer or Lead Auditor (MANDATORY)
- CBCP or equivalent
- CDRE or equivalent
- ISO 31000 or other risk certifications
- Cybersecurity and/or cloud certifications are a plus
