Security Risk & Assurance Manager

Apply Now

Erbil, Iraq Full-time

Job Title

Work Schedule

Sunday – Thursday 8:30 – 17:00

Department

Security / Corporate Security

Work Location

Erbil Office, with traveling across HKN operational areas

Reports to

Global Head of Security

Start Date

To be confirmed

Subordinates

Not Applicable

Application Deadline

November 4, 2026

Contract Type

Open Contract

Other details

Three months’ probation

About Us:

HKN Energy Ltd. is a privately held, independent energy company with oil exploration and production operations in the Kurdistan Region of Iraq (KRI).

HKN Energy is focused on increasing production of its Sarsang Block, located in the prolific Zagros fold, and thrust belt of Northern Kurdistan. We have a highly experienced, diverse team with work experience in over 80 different countries. HKN Energy is committed to building a company culture that is guided by its Core Values of Integrity, Respect, Excellence, Commitment, and Teamwork.

Position Summary

The Security Risk & Assurance Officer provides the analytical, governance, and external engagement backbone of the security function. Reporting to the Global Head of Security, the role delivers three core outputs: a clear and current understanding of the threat and risk environment, a robust framework of security standards and assurance that is consistently applied, and trusted working relationships with government and local security stakeholders. Strategic decisions, policy approvals, and sensitive high-level engagement are escalated to the Senior Manager.

Main Duties & Responsibilities

1. Security Risk Assessment & Threat Analysis

Conduct and periodically update security risk assessments for facilities, projects, routes, and operating environments, and present findings and recommendations to the Senior Manager.
Monitor and analyze the threat landscape (political, criminal, terrorism, civil unrest, insider threat, and other emerging risks) using open-source, commercial, government, and peer-network intelligence.
Issue regular threat assessments, situation reports, and ad hoc alerts to management and operational teams.
Maintain the security risk register, ensuring mitigation actions are defined, owned, and tracked to closure.
Develop and maintain threat level and security alert state criteria, and recommend changes in posture, escalating significant changes for approval.
Provide security risk input to project planning, site selection, market entry, change management, and business continuity decisions.
Develop scenario analyses and early-warning indicators to anticipate deteriorating conditions.

2. Security Standards, Policy & Assurance

Develop, implement, and maintain security policies, standards, procedures, and minimum requirements aligned with company governance and recognized frameworks (e.g. ISO 31000, ISO 18788, Voluntary Principles on Security and Human Rights).
Maintain site security plan templates and verify consistent application across locations.
Design and run an annual assurance program covering audits, inspections, drills, and spot checks of sites, contractors, and processes.
Track findings and corrective actions to closure, and report compliance status, trends, and gaps to the Global Head of Security.
Review security-related contractual and regulatory requirements, and monitor changes in applicable legislation and standards.
Develop and deliver security awareness training and induction material for employees, contractors, and visitors.
Propose policy changes and improvements for approval.

3. Government & Local Security Liaison

Build and maintain working relationships with police, military, intelligence services, regulators, local authorities, and community leaders.
Coordinate with public security forces in line with company policy, human rights standards, and any governing agreements or protocols.
Engage with embassies, industry peers, and information-sharing networks to strengthen situational awareness and share good practice.
Support community security engagement to reduce tensions and maintain the operation's social license.
Ensure compliance with local security regulations, licensing, and permit requirements.
Keep a log of stakeholder engagements and commitments and brief the Senior Manager on key developments.
Refer high-level government engagement and sensitive issues to the Senior Manager.

Minimum Qualifications

Essential

Bachelor's degree in security management, risk management, criminology, international relations, intelligence studies, or a related field (or equivalent professional experience).
[6-10] years of security risk management experience, ideally in energy, mining, or other complex or high-risk environments.
Demonstrated experience in threat analysis, security risk assessment, and producing decision-quality reporting.
Experience developing or implementing security policies, standards, and audit or assurance programes.
Working knowledge of international security standards and good practice.
Proven ability to engage effectively with government and security stakeholders, including in emerging or challenging markets.

Desirable

Professional certifications such as CPP, PSP, or equivalent; ISO 31000, ISO 18788, or lead auditor training.
Military, law enforcement, intelligence, or government security background.
Familiarity with the Voluntary Principles on Security and Human Rights.
Experience with geopolitical or country risk analysis tools and platforms.
Relevant regional language skills.

Skills & Competencies

Strong analytical and critical thinking, with sound judgement under pressure
Ability to turn complex information into clear, actionable recommendations
Excellent written and verbal communication, including senior-level briefings
Stakeholder management, negotiation, and influencing skills
Audit, inspection, and assurance methodology
Integrity, discretion, and cultural awareness
Proficiency with risk management, intelligence, and reporting tools
Working proficiency in English sufficient to prepare reports and correspond with international stakeholders.

Working Conditions

Office based with regular travel to sites and project locations, including remote or high-risk areas.
Availability for out-of-hours support during incidents or deteriorating security conditions.