Risk Manager (BCM)
National Petroleum Construction Company
Total years of experience :17 years, 6 Months
• Managing the company wide BCM program according to UAE BCM Standard (NCEMA7000:2015);
• Facilitating the company BCM Taskforce (i.e. Crisis Management Committee)and BCM Steering Committee Regular Meetings;
• Managing information classification implementation;
• Supervising the Risk assessment workshops to identify and assess operational risks & business continuity threats associated with the company operations and activities;
Key Achievements
COVID19 Response
Facilitated the company response strategy to manage and control COVID19 implications on the company stakeholders and operations.
Information Classification
Established the company information classification policy and procedure and supervised the implementation of the associated control
• Ensuring business continuity, security, emergency planning and risk management activities are in-align with Abu Dhabi Plan and according to NCEMA requirements and directions;
• Supporting establishing crisis management, business continuity and risk management teams and committees;
Key Achievements
Abu Dhabi Government Excellence System
Supervised participation in Abu Dhabi Government Award for Excellence in business continuity and risk management
Digital Transformation:
Managed the BCM & Risk Management digital transformation according to NCEMA7000 and ISO22301 and ISO31000.
• Managing Business Continuity, Disaster Recovery, Crisis Management, IT Audit, and Information Security projects and carrying out engagements field work;
• Managing engagement team members and ensuring efficient and effective;
• Managing the client relationship by managing their demands and expectation to ensure client satisfaction;
• Facilitating engagement meetings with key stakeholders;
• Developing engagement reports and final deliverables;
• Developing and delivering training courses and awareness sessions;
• Developing technical and commercial proposals in response to clients Request-for-Proposals (RFP).
Business Continuity Management:
•Develop and design business continuity framework including policies, procedures and templates for business continuity plans (BCP) and testing/exercises reports.
•Understand the organization by implementing business impact analysis (BIA) and risk assessment (RA).
•Recommend, formulate, implement & update continuity strategies and recovery options for critical services & activities.
•Supervise the preparation of the business recovery sites and IT backup site.
•Develop business unit continuity plans.
•Develop branches relocation/closure procedures.
•Develop the annual business continuity testing plan and supervise test implementation.
•Facilitate and manage business continuity and crisis management committee meetings.
•Ensure the compliance of the business continuity management program to the bank’s strategies, local instructions and international standards such as CBJ, BS25999 & BCI Good Practice. In-addition to implementing Société General Group BCP methodology and polices.
•Conduct awareness sessions to all employees.
Crisis Management:
•Develop crisis management plan, emergency notification and response procedures.
•Supervise the preparation of the crisis management meeting (emergency) rooms and equipments.
•Participate in developing internal/external communication plan and media response plan.
•Report on incidents and document lessons learned.
•Conduct awareness sessions to all employees.
Operational Risk Management:
•Participate in identifying operational risks surrounding the bank operations.
•Assess and measure the risk by conducting workshops and reviewing the historical information.
•Develop and follow-up mitigation actions and controls implementation to minimize the probability and/or impact of each identified very high or high risks.
•Monitor and assess risks and controls by conducting risk and control self-assessment exercises (RCSA) on semiannual bases and reviewing key risk indicators (KRI) on quarterly bases.
•Assess and measure the residual risk according to RCSA and KRI results and develop and supervise the implementation of related action plans to minimize it.
•Conduct operational loss data collection and analysis.
•Facilitate and manage operational risk committee meetings..
•Review procedures and make recommendations on controls.
Project Management:
•Work as a liaison to communication among team members from different units.
•Manage the change control process.
•Facilitate project meetings with stakeholders and other relevant vendors such.
•Ensure accurate and timely completion of all project activities.
•Monitor and perform a periodic review of actual progress in the project plan and send exception reports.
•Facilitate quality review meetings for all project deliverables.
Business Continuity Management:
•Participate in Developing and Designing Business Continuity Framework including Policies, Procedures and Templates for Business Continuity Plans and Testing/Exercises Reports.
•Understand the organization by implementing Business Impact Analysis and Risk Assessment in The Housing Bank for Trade and Finance.
•Recommend, formulate and participate in supervising implementation & update Continuity strategies and recovery options for mission critical & Critical services & Activities .
•Participate in Developing Business Continuity plans
•Develop the annual Business Continuity Testing Plan and supervise its implementation.
•Ensure the compliance of the Bank’s Business Continuity Management Program to the Bank’s strategy and local and international standards such as CBJ, BS25999 & BCI Good Practice Guideline.
Operational Risk Management:
•Participate in Identifying HBTF Operational Risks, Risk Controls & Key Risk Indicators (KRIs).
•Review procedures and make recommendations on controls.
•Review compliance Testing Results and follow up Business Unit to improve Untested, Never works & sometime works control.
•Administrate Control Risk Self Assessment System (CRSA).
Project Management
•Assist in confirming and defining the scope of the project.
•Work as a liaison to communication among team members from different units.
•Assist in managing the change control process.
•Participate / facilitate project meetings with stakeholders and other relevant vendors such as E&Y.
•Ensure accurate and timely completion of all activities assigned to project team leaders.
•Follow up on installation and configuration of software with concerned teams.
•Monitor and perform a periodic review of actual progress in the project plan and send exception reports when needed.
•Facilitate quality review meetings for all project deliverables.
•Participate in the preparation of the project closure document.
Disaster Recovery Management
•Assist in maintaining the Disaster Recovery Plan.
•Assist in Formulating the Recovery Strategy for IT systems and ensure up-to-date documented backup/recovery operational procedures.
•Participate in Developing the IT Disaster Recovery Testing Plan and supervise its implementation.
•Report on testing results and document lessons learned.
•Report on Disaster Recovery Incidents and document lessons learned.
Certified Information System Auditor
Certified Project Management Professional-PMI
Specialized Professional Diploma Certification in Risk Management and Basel Accord (Risk Management Officer)
Member in The Business Continuity Institute
Certified By The Business Continuity Institute- Pass With Merit
B.Sc. degree in COMPUTER SCIENCE, Amman Al-Ahliyya University-Jordan. Average: 81.6 Grade: Very Good. Rank: The second on the specialization.