Control Risks is seeking a hands-on Business Continuity Management (BCM), Crisis Management (CM) and Enterprise Risk Management (ERM) professional to support the development and implementation of the client’s resilience programme. This is a practitioner role focused on building and embedding workable arrangements, not an audit, assurance or purely advisory position. BCM and CM are the primary capabilities, with ERM as an important secondary capability.

Initial three-month requirement

• Undertake current-state reviews and stakeholder discussions.
• Develop the client’s BCM Policy, Framework and supporting templates.
• Develop the Crisis Management Policy, Plan and supporting tools.
• Support the uplift of the existing ERM Policy, governance, risk assessment and reporting framework, and develop practical, management-ready documentation.

The individual will work closely with Control Risks during this period. Control Risks will provide the methodology, templates, technical guidance and senior oversight.

Thereafter, the intent is for the individual to transition to the client and take ownership of implementing, embedding and maintaining the programme across the organisation, including:

• Business Impact Analysis and continuity risk assessments
• Recovery strategies and Business Continuity Plans
• Crisis preparedness and practical scenario playbooks
• Training, testing and exercises
• BCM and CM programme governance, reporting and continual improvement
• ERM coordination, risk registers and mitigation tracking

Requirements

• Ideally 7–10 years of relevant experience, with BCM and CM as the primary capabilities and credible ERM exposure.
• Practical experience across the BCM lifecycle, including Business Impact Analysis, recovery strategy, continuity planning, exercises and programme maintenance.
• Hands-on crisis management and incident response experience.
• Credible ERM experience, including risk assessment, risk registers, governance and management reporting.
• Able to draft clear policies and frameworks and implement them operationally.
• Strong stakeholder management, interviewing, workshop facilitation and written communication skills.
• Comfortable producing concise, practical and management-ready documentation.
• Experience in energy, infrastructure, manufacturing or another operationally complex, multi-site environment is advantageous, but not mandatory.

Qualifications & Knowledge

• Graduate degree in business, risk management, engineering, operations or a related discipline.
• Working knowledge of International Organization for Standardization (ISO) 22301, with familiarity with ISO 22361 and ISO 31000.
• A relevant BCM, CM or Risk Management certification is desirable, including Business Continuity Institute (BC), Disaster Recovery Institute International (DRII), ISO 22301 Lead Implementer/Lead Auditor or equivalent.
• Strong written and verbal communication skills.