Business Continuity Specialist

Summary:
Develop and maintain business continuity and disaster recovery frameworks aligned with ISO 22301, ISO 27031, and SAMA requirements to ensure organizational resilience.

Responsibilities:

• Develop, implement, and maintain the enterprise-wide Business Continuity Management (BCM) framework aligned with regulatory and industry standards
• Develop Business Continuity Documents:

1. Develop and recommend business continuity and recovery strategies (alternate sites, remote working, manual workarounds)
2. Define resource requirements (personnel, technology, facilities, third parties)
3. Develop and maintain Business Continuity Plans (BCPs)
4. Develop and maintain Disaster Recovery Plans (DRPs) with IT teams
5. Define crisis communication and escalation protocols

• Establish and maintain BCM policy, standards, procedures, and governance
• Define BCM scope, objectives, and applicability across business units
• Conduct Business Impact Analysis (BIA)
• Determine:

1. Maximum Tolerable Downtime (MTD)
2. Recovery Time Objectives (RTO)
3. Recovery Point Objectives (RPO)

• Assess financial, operational, regulatory, and reputational impacts
• Identify single points of failure and mitigation strategies
• Establish Crisis Management Team (CMT) structure and roles
• Perform BCM risk assessments covering:

1. Operational threats
2. Technology threats
3. Cyber threats
4. External threats

• Conduct BCM testing programs (tabletop, simulation, full-scale drills)
• Validate effectiveness of BCPs and DRPs
• Document test results and track remediation actions
• Maintain and update BCM documentation and plans
• Ensure version control and governance of BCM documents
• Assess third-party/vendor continuity capabilities
• Ensure vendors maintain adequate BCP and DR arrangements
• Establish BCM governance committees and reporting
• Prepare BCM dashboards and reports for senior management
• Monitor BCM readiness and compliance
• Ensure alignment with regulations and standards (e.g., ISO 22301)
• Support audits, inspections, and regulatory reporting
• Conduct BCM awareness and training programs
• Provide role-based training for crisis and recovery teams
• Promote business continuity culture across the organization
• Integrate BCM into:

1. Enterprise risk management
2. Operational risk
3. IT risk frameworks

• Embed BCM into:
• Strategic initiatives

1. Digital transformation
2. New product development

• Conduct BCM maturity assessments and benchmarking
• Drive continuous improvement for organizational resilience