Security Risk & Assurance Manager

Job Title	Security Risk & Assurance Manager	Work Schedule	Sunday – Thursday 8:30 – 17:00
Department	Security / Corporate Security	Work Location	Erbil Office, with traveling across HKN operational areas
Reports to	Global Head of Security	Start Date	To be confirmed
Subordinates	Not Applicable	Application Deadline	November 4, 2026
Contract Type	Open Contract	Other details	Three months’ probation

About Us:

HKN Energy Ltd. is a privately held, independent energy company with oil exploration and production operations in the Kurdistan Region of Iraq (KRI).

HKN Energy is focused on increasing production of its Sarsang Block, located in the prolific Zagros fold, and thrust belt of Northern Kurdistan. We have a highly experienced, diverse team with work experience in over 80 different countries. HKN Energy is committed to building a company culture that is guided by its Core Values of Integrity, Respect, Excellence, Commitment, and Teamwork.

Position Summary

The Security Risk & Assurance Officer provides the analytical, governance, and external engagement backbone of the security function. Reporting to the Global Head of Security, the role delivers three core outputs: a clear and current understanding of the threat and risk environment, a robust framework of security standards and assurance that is consistently applied, and trusted working relationships with government and local security stakeholders. Strategic decisions, policy approvals, and sensitive high-level engagement are escalated to the Senior Manager.

Main Duties & Responsibilities

1. Security Risk Assessment & Threat Analysis

• Conduct and periodically update security risk assessments for facilities, projects, routes, and operating environments, and present findings and recommendations to the Senior Manager.
• Monitor and analyze the threat landscape (political, criminal, terrorism, civil unrest, insider threat, and other emerging risks) using open-source, commercial, government, and peer-network intelligence.
• Issue regular threat assessments, situation reports, and ad hoc alerts to management and operational teams.
• Maintain the security risk register, ensuring mitigation actions are defined, owned, and tracked to closure.
• Develop and maintain threat level and security alert state criteria, and recommend changes in posture, escalating significant changes for approval.
• Provide security risk input to project planning, site selection, market entry, change management, and business continuity decisions.
• Develop scenario analyses and early-warning indicators to anticipate deteriorating conditions.

2. Security Standards, Policy & Assurance

• Develop, implement, and maintain security policies, standards, procedures, and minimum requirements aligned with company governance and recognized frameworks (e.g. ISO 31000, ISO 18788, Voluntary Principles on Security and Human Rights).
• Maintain site security plan templates and verify consistent application across locations.
• Design and run an annual assurance program covering audits, inspections, drills, and spot checks of sites, contractors, and processes.
• Track findings and corrective actions to closure, and report compliance status, trends, and gaps to the Global Head of Security.
• Review security-related contractual and regulatory requirements, and monitor changes in applicable legislation and standards.
• Develop and deliver security awareness training and induction material for employees, contractors, and visitors.
• Propose policy changes and improvements for approval.

3. Government & Local Security Liaison

• Build and maintain working relationships with police, military, intelligence services, regulators, local authorities, and community leaders.
• Coordinate with public security forces in line with company policy, human rights standards, and any governing agreements or protocols.
• Engage with embassies, industry peers, and information-sharing networks to strengthen situational awareness and share good practice.
• Support community security engagement to reduce tensions and maintain the operation's social license.
• Ensure compliance with local security regulations, licensing, and permit requirements.
• Keep a log of stakeholder engagements and commitments and brief the Senior Manager on key developments.
• Refer high-level government engagement and sensitive issues to the Senior Manager.

Minimum Qualifications

Essential

• Bachelor's degree in security management, risk management, criminology, international relations, intelligence studies, or a related field (or equivalent professional experience).
• [6-10] years of security risk management experience, ideally in energy, mining, or other complex or high-risk environments.
• Demonstrated experience in threat analysis, security risk assessment, and producing decision-quality reporting.
• Experience developing or implementing security policies, standards, and audit or assurance programes.
• Working knowledge of international security standards and good practice.
• Proven ability to engage effectively with government and security stakeholders, including in emerging or challenging markets.

Desirable

• Professional certifications such as CPP, PSP, or equivalent; ISO 31000, ISO 18788, or lead auditor training.
• Military, law enforcement, intelligence, or government security background.
• Familiarity with the Voluntary Principles on Security and Human Rights.
• Experience with geopolitical or country risk analysis tools and platforms.
• Relevant regional language skills.

Skills & Competencies

• Strong analytical and critical thinking, with sound judgement under pressure
• Ability to turn complex information into clear, actionable recommendations
• Excellent written and verbal communication, including senior-level briefings
• Stakeholder management, negotiation, and influencing skills
• Audit, inspection, and assurance methodology
• Integrity, discretion, and cultural awareness
• Proficiency with risk management, intelligence, and reporting tools
• Working proficiency in English sufficient to prepare reports and correspond with international stakeholders.

Working Conditions

• Office based with regular travel to sites and project locations, including remote or high-risk areas.
• Availability for out-of-hours support during incidents or deteriorating security conditions.