Senior Enterprise Risk Analyst (Business Continuity Management)

About the Role:

The role supports and independently delivers key elements of the business continuity and operational resilience programme across Tabbys UAE entities, helping the business understand which services must keep running, how long they can be disrupted before customers are harmed, and whether the firm could recover within that time. The role works closely with first-line owners across the business and supports the firms response to regulatory expectations on operational resilience.

• Support the delivery of the business continuity and operational resilience programme across both UAE entities, in line with Central Bank of the UAE (CBUAE) expectations and the Group risk framework.
• Run the business impact analysis cycle with departments gathering, challenging and consolidating what each team does, what breaks if it stops, and how quickly.
• Support the identification of critical operations and the setting of impact tolerances, working with first-line owners and senior management.
• Develop and maintain business continuity and recovery plans, dependency mapping and crisis playbooks, keeping them current, practical and usable.
• Coordinate and support the exercise and testing programme, including tabletop exercises, and document outcomes, lessons learned and follow-up actions.
• Support the maintenance and continuous improvement of business continuity and operational resilience policies, standards and methodologies.
• Contribute to resilience reporting for senior management, risk committees and the regulator, including maturity and self-assessment positions.
• Support third-party and technology dependency work where it affects the resilience of critical operations.
• Provide practical support to first-line owners on business impact analyses, recovery objectives, continuity planning and remediation actions.
• Act as a point of contact for internal audit and support regulatory or external reviews relating to business continuity and operational resilience.
• Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers and audit-ready evidence.