Senior Enterprise Risk Analyst (Business Continuity Management)

Key Responsibilities

• Support the delivery of the business continuity and operational resilience programme across both UAE entities, in line with Central Bank of the UAE (CBUAE) expectations and the Group risk framework.
• Run the business impact analysis cycle with departments — gathering, challenging and consolidating what each team does, what breaks if it stops, and how quickly.
• Support the identification of critical operations and the setting of impact tolerances, working with first-line owners and senior management.
• Develop and maintain business continuity and recovery plans, dependency mapping and crisis playbooks, keeping them current, practical and usable.
• Coordinate and support the exercise and testing programme, including tabletop exercises, and document outcomes, lessons learned and follow-up actions.
• Support the maintenance and continuous improvement of business continuity and operational resilience policies, standards and methodologies.
• Contribute to resilience reporting for senior management, risk committees and the regulator, including maturity and self-assessment positions.
• Support third-party and technology dependency work where it affects the resilience of critical operations.
• Provide practical support to first-line owners on business impact analyses, recovery objectives, continuity planning and remediation actions.
• Act as a point of contact for internal audit and support regulatory or external reviews relating to business continuity and operational resilience.
• Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers and audit-ready evidence.

Skills, Knowledge & Expertise

• 2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment.
• Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically.
• Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage.
• Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively.
• Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations.