Risk Manager
Posted Updated
- Define risk criteria, scoring methodology and evaluation approach, aligned to the client existing enterprise risk framework.
- Build credible failure scenarios across power distribution, potable water, sewerage, stormwater, street lighting, road networks, and fire and life safety systems.
- Assess likelihood, consequence and the effectiveness of existing controls, and set inherent and residual risk ratings.
- Map interdependencies between utility systems and identify single points of failure across the network.
- Lead business impact analysis to establish minimum service levels, maximum tolerable outage and recovery time objectives for each critical service.
- Prepare heat maps, impact summaries and decision material, then facilitate risk appetite and tolerance agreement with executive stakeholders.
- Develop risk treatment options, set target residual risk levels and agree them through structured workshops.
- Run quantitative risk analysis using Monte Carlo simulation to model cost and schedule exposure, test mitigation options and produce confidence based outputs for management decisions.
- Set the distribution assumptions, correlation and iteration basis behind each simulation, and defend them to client stakeholders.
- Present probabilistic results as S-curves, tornado diagrams and contingency recommendations at defined confidence levels, typically P50 and P80.
- Author the business continuity plan covering governance, activation triggers, escalation pathways, role profiles, resource requirements and communication flow.
- Write scenario based operational playbooks with initial response, stabilization and recovery steps, timelines, task owners and interdependency notes.
- Define resource requirements including vendor and contractor call out arrangements, temporary service provision and logistics.
- Support integration of continuity tasks into client SOPs, service level agreements and vendor obligations.
- Design the training needs analysis and training modules, deliver role based training and oversee emergency drills.
- Produce drill reports and lessons learnt reports, and refine the plan against findings.
- Provide peer review on risk outputs produced by the wider team and confirm risk ratings are applied consistently across sites.
- Lead knowledge transfer and handover of the continuity framework to client operational teams.
- Contribute to bids, methodology development and technical proposals within the risk and continuity service line.
- Bachelor degree in Engineering or a related technical discipline. A postgraduate qualification in risk management is an advantage.
- Minimum 15 years in risk management, including business continuity delivery on infrastructure, utility or industrial portfolios.
- Lead Implementer or Lead Auditor certification in ISO 22301, plus an ISO 31000 risk management credential.
- PMI-RMP, IRM or equivalent risk credential is an advantage.
- Experience running Monte Carlo simulations for quantitative cost and schedule risk analysis, using @RISK, Primavera Risk Analysis, Safran Risk, Acumen Risk or equivalent. Preferred rather than essential.
- Ability to translate probabilistic output into contingency and decision recommendations that non technical stakeholders can act on.
- Experience facilitating risk appetite and business impact workshops at executive level.
- Continuity plans you produced that were adopted operationally, with evidence of drills run against them.
- Understanding of utility interdependencies such as power to pumping, power to lighting networks and water supply to fire systems.
- Fluent in English and Arabic