Business Resilience Specialist

Job Purpose: The Business Resilience Program Specialist is responsible for developing, implementing, and maintaining the organization's business Continuity and Resilience programs. This role ensures that the company can maintain a uniform organizational readiness and operational resilience to respond effectively to incidents and disruptions to normal business operations, minimizing impact and ensuring a swift recovery. The Specialist works closely with various departments to identify, assess, prioritize, and manage risks that could potentially impact the organization's objectives and operations, develop mitigation strategies, oversee business continuity and crisis management tasks, and ensure compliance with industry standards and regulations and that all relevant models and controls are operating effectively.

Job Scope: Work with all internal & external business parties within and outside the organization ensuring preparedness to manage disruptions to normal operations. Manage programs that will address all risks, threats, controls, and mitigation measures at all function levels as directed by management. Plan, manage programs, and establish partnerships with technical experts, certification bodies, standardization bodies, and government agencies.

Support the following listed programs and requirements:

• Enterprise Risk Management (ERM)
• Business Continuity Planning (BCP)
• Disaster Recovery Plan (DRP)
• Emergency Response Plan (ERP)
• Compliance with regulatory requirements
• Training and Awareness Programs
• Continuous Improvement and Audits
• And any additional added programs as directed by management

MAIN ACTIVITIES: A Business Resilience Program Specialist plays a critical role in helping organizations prepare for and recover from disruptive events that could impact operations. The key responsibilities and tasks of a Business Resilience Program Specialist include:

1. Develop and Maintain BCP and DRP

• Create and update business continuity and disaster recovery plans
• Maintain the Business Continuity Policy (BCP), manual, and plan
• Plan, develop, and improve Business Resiliency Programs (BRP)
• Develop and implement procedures for responding to emergencies, ensuring the safety of employees, customers, and assets
• Maintain multiple organizational resilience programs and projects
• Conduct BIA (Business Impact Analysis) to identify critical business processes, dependencies, and the potential impact of disruptions on operations
• Ensure formulating and implementing departmental plans in line with overall strategies
• Serve as the Company's Expert and primary resource to management and other relevant responsible parties
• Track and monitor the recovery process post-incident, ensure critical functions are restored, conduct lessons learned sessions, implement corrective actions measures to enhance organizational resilience, and act to modify business continuity plans based on feedback
• Conduct regular reviews and updates based on risk assessments and changing business needs
• Evaluate the effectiveness of risk management programs and recommend changes as necessary
• Maintain a tight linkage with business strategy and priorities
• Proactively seek and recommend enhancements to processes and development
• Design and implement an overall organizational risk management process which incorporates analysis of the financial impacts on the company whenever risks occur

1. Risk Assessments

• Perform regular risk assessments to identify potential threats and vulnerabilities
• Lead the process for Identification, evaluation and assessment of potential risks that may affect the company or that may impact its performance, business continuity and resilience
• Performing a risk assessment by analyzing current risks and identifying potential risks that are affecting the company
• Involve in reviewing new major contracts or internal business proposals which may impose risks or impact the company resilience
• Develop mitigation strategies and action plans
• Consult and coordinate with relevant departments to determine, analyze, and mitigate risks involved in establishing and maintaining various client, governmental, and industry relationships

1. Training and Awareness

• Develop and deliver training programs for staff on business continuity and crisis management
• Improve risk awareness amongst staff by providing support and training within the company
• Assure that business managers are knowledgeable and updated about current resiliency programs, interpretations and best practices for meeting the programs objectives
• Conduct regular drills and simulations to ensure preparedness
• Facilitate workshops to build credible risk and business interruption scenarios and articulate results

1. Incident Response

• Coordinate the response to incidents and disruptions
• Ensure effective communication and coordination during incidents
• Establish and lead a crisis management team to coordinate response efforts, make critical decisions, and communicate with stakeholders during emergencies

1. Compliance and Audit

• Ensure compliance with relevant regulations and standards
• Assist Management Committee for ensuring that the Company has an effective ERM framework and capabilities and resources to apply it consistently throughout the Company
• Conduct internal audits and continuous improvement initiatives
• Ensure all programs are kept current and are effectively applied
• Ensure business continuity objectives are met to provide essential resilience with capability of an effective response that safeguards life, facilities, equipment, vital records, other assets, and continuous performance of critical business functions

1. Monitor and evaluate the effectiveness of Business Resiliency Programs

• Risk reporting tailored to the relevant audience
• Define, organize, monitor and analyze KPI's related to applicable programs
• Assess metrics and monitoring risks
• Monitor and report on progress of programs to management and executives
• Monitor Business Resiliency Programs performance
• Monitor Company's internal and external business environments for detecting early signs of opportunities and threats that may influence current and future business and operational plans
• Monitor, and ensure that proper mitigation and response planning is set by responsible parties

Expected Results:

• Effective plan, development, monitor, analysis and reporting of Business Resilience Program
• Robust and up-to-date business continuity and disaster recovery plans
• Reduced risk and vulnerability through effective risk assessments and mitigation strategies
• High levels of staff preparedness and awareness
• Efficient and effective incident response
• Compliance with regulatory requirements and continuous improvement in resilience practices

PRINCIPAL CONTACTS (CONTEXT AND ENVIRONMENT):

Internal:

• Risk Management & Compliance Section Manager
• CFO
• Financial Controller
• All Function Heads
• Management Committees Members
• ICT and Operations Teams
• Human Resources
• Security Team
• All other Business Departments at the Organization

External:

• Shareholders and Boards
• Royal Commission
• Regulatory Bodies
• Governmental and certification bodies
• Industry Associations
• Consultants
• Third-party Auditors
• Emergency Services
• Vendors and Suppliers
• Peers in industry
• Any other applicable agencies & external consultants

JOB PERFORMANCE DIMENSIONS KPIS

• Timeliness and accuracy of updated BCP and DRP documents
• Number of successful risk assessments and implemented mitigation strategies
• Training completion rates and staff participation in drills
• Incident response effectiveness and recovery times
• Compliance audit results and identified improvements

MINIMUM REQUIREMENTS:

Main Competencies and Qualities:

• Strong knowledge of Oil and Gas industry
• Expert knowledge of contemporary theories and practices related to Risk Management, Compliance, Governance, and Business Continuity
• Able to work in teams and autonomously with strategic direction
• Proactive and self-motivated
• Strong knowledge of related international standards
• Strong knowledge of Refining production operations and processes
• Ability to plan, organize, and prioritize work effectively
• Ability to work under pressure and manage multiple tasks
• Expert level in Risk management fields
• Conversant with Microsoft Office applications and Analysis tools
• Excellent communication and interpersonal abilities
• Detail-oriented with strong organizational skills
• Strong presentation skills
• Strong application of analytical thinking and problem-solving skills
• Strong facilitation skills
• Strong command of oral and written English
• Excellent understanding of business strategies, goals and objectives and their metrics and measures
• Excellent change management skills

Education Background:

• Bachelor's degree in Risk Management, Business Administration, Law, Finance, Accounting or a related field, advanced degree preferred
• Professional certifications such as CBCP, CRISC, CISA, Business Continuity Management are preferred

Experience:

• More than five years of experience in business continuity, disaster recovery, Risk Management, or a related field in Refineries or Petrochemicals
• Strong knowledge of regulatory frameworks and industry standards related to business resilience
• Proven track record in developing and implementing business resilience programs
• Experience in conducting training and awareness programs
• Familiarity with relevant regulatory requirements and industry standards.