Position Information

Department/Section:    Enterprise Risk Management    

Job Title: Risk Management, Business Continuity Management & Data Privacy Specialist

Reports to: Risk Management, Business Continuity Management & Data Privacy Team Leader                   

About The Role

The Risk Management, Business Continuity Management & Data Privacy Specialist is accountable for Risk Management, Business Continuity Management & Data Privacy Team Leader to execute the day-to-day activities of the Business Continuity Management (BCM), Operational Risk, and Da ta Privacy program across Zain Sudan, supporting the restore normal operations quickly and minimize the impact of disruptions on the business.

The role provides hands-on execution of risk assessments, business impact analyses, privacy assessments, and business continuity management testing activities, supports monitors and reports of risk, privacy, and cybersecurity-related exposures that could affect the resilience and compliance posture of the company.

Key Tasks/Accountabilities

1.   Support day-to-day compliance of processes with applicable laws, data protection regulations, security and risk best practices, and Zain SD policies related to Business Continuity Management (BCM) , Disaster Recovery (DR), and Data Privacy.

2. Conduct Business Impact Analysis (BIA) workshops with business units, consolidate findings, and draft mitigation and remediation recommendations for review by the Team Leader.

3. Assist in conducting audits, system reviews, and testing of Disaster Recovery Plans; use of automated tools, manual methods, and interviews to gather information necessary for business continuity risk reporting.

4. Prepare written reports and dashboards summarizing BCM, risk, and privacy findings and recommendations for management review.

5. Contribute to the maintenance of the enterprise-wide business continuity management program, including updating tools, templates, and instructional guides for business continuity planning and event management.

6. Support coordination and facilitation of enterprise-wide business continuity exercises and simulations, including logging outcomes and follow-up actions.

7. Maintain program processes and documentation to ensure the business continuity management /risk/privacy program remains current and aligned with industry standards (e.g. ISO, BCI, NIST, ITIL, COBIT).

8. Assist in identifying and assessing privacy risks, and support integration of mitigation measures into BCM, risk, and operational processes.

9. Support Privacy Impact Assessments (PIA) / Data Protection Impact Assessments (DPIA) for new projects, systems, and third-party engagements, under the guidance of the Team Leader.

10. Monitor data privacy and BCM-related risks and incidents and escalate findings as part of the enterprise risk reporting framework.

11. Support secure handling of personal data across its lifecycle (collection, processing, storage, sharing, retention, and disposal) in coordination with business units.

12. Assist in reviewing third-party/vendor compliance with data privacy requirements and contribute to review of contractual privacy clauses and agreements.

13. Maintain records and trackers related to contractor, supplier, and partner agreements relevant to business continuity management and data privacy obligations.

14. Participate in event management (DR) on-call support as part of the company emergency response team.

15. Support delivery of security, risk, and privacy awareness training sessions for Zain staff and other audiences as required.

16. Support cyber risk assessments and threat/vulnerability reviews for critical systems, contributing a business continuity management /privacy lens (e.g., recovery time objectives, data exposure impact).

17. Contribute to Business Impact Analyses by capturing cybersecurity-related disruption scenarios (ransomware, data breach, DDoS, insider threat) alongside traditional operational risks.

18. Ensure compliance with all applicable policies & regulatory requirements in information security

Qualifications/Experience / Skills

Qualifications/Experience: -

1.  B.Sc. in Telecommunications Engineering, Computer Science/ Engineering, Information Systems, or any technical relevant field.

2. Minimum two years of relevant experience in risk management, business continuity, or a related operations/technology environment.

3. Preferrable: Progress toward or completion of a certification from Industry practices institutions, such as BCI, PMI, CCSA, CCSP, ISC2, ITIL, GDPR, NIST, or any related equivalent.

4. Previous experience in a telecom or network environment is preferred.

Skills: -

1.  Ability to interpret and apply best practice methods/processes.

2. Highly developed communication and presentation skills (verbal and written) in both Arabic and English, including the ability to communicate and present effectively with various levels as well as top management.

3. Hands on strong project management skills.

4. Critical analytical thinking and problem solving.

5. Ability to build excellent relationships with key suppliers/customers.

6. Third party and vender management.

7. Planning and organization skills.

8. Able to persuade and influence senior manager and employee levels.

9. Highly developed skills in use of relevant IT packages including Excel. Word, PowerPoint etc.

10. Highly developed reporting skills, metrics, and analytics, including dashboard creation for executive leadership and board reporting.

Typical Performance Measures

1. Quality and timeliness of BIA reports, risk assessments, and PIA/DPIA support deliverables.

2. Accuracy and completeness of Business Continuity Management documentation, trackers, and test/exercise records.

3. Quality of relationships with internal customers, peers, and suppliers.

4. Responsiveness and effectiveness in on-call DR/event management support.

5. Adherence to agreed quality standards and deadlines for assigned tasks.

6. Contribution to closure of audit findings of Business continuity, risk, & privacy action items.