Overview:
The Business Continuity Management (BCM) Officer is responsible for implementing and enhancing the Bank's Business Continuity Management Framework to ensure continued operations during and after disruptive events. The role includes facilitating business impact assessments, overseeing plan development and testing, and maintaining an effective crisis communication systemincluding the emergency call treein alignment with regulatory expectations.
Responsibilities:
Business Continuity Management Framework
- Develop and maintain BCM policies, procedures, and standards in accordance with regulatory requirements (e.g., BSP) and global best practices (e.g., ISO 22301).
- Lead the implementation of the BCM Framework, ensuring identification of critical business functions, dependencies, recovery strategies, and continuity requirements.
- Conduct and update Business Impact Analysis (BIAs) to assess business process criticality and define Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
- Guide business units in drafting, reviewing, and updating Business Continuity Plans (BCPs) and ensure these are complete, tested, and actionable.
- Work closely with IT and Information Security teams to align Disaster Recovery Plans (DRPs) with business needs.
BCM Governance
- Prepare and manage the agenda for the BCM Committee, ensuring that relevant updates, risks, and testing results are escalated and discussed.
- Ensure business units maintain accountability for their respective BCPs and implement required changes based on tests, audits, or actual disruptions.
- Monitor adherence to BCM standards and escalate any gaps or non-compliance to senior management and the BCM Committee.
- Coordinate with regulators and internal/external auditors during assessments related to business continuity or resiliency.
Testing, Training, and Awareness
- Plan and facilitate periodic testing activities such as tabletop exercises, simulated disruptions, and full/partial recovery drills.
- Evaluate testing outcomes, identify gaps, and implement corrective actions to strengthen recovery capabilities.
- Develop and deliver BCM awareness programs, including training sessions for all employees and specific onboarding sessions for new hires.
- Ensure key personnel understand their roles and responsibilities in activating and executing BCPs during disruptions.
Incident Response and Crisis Management Support
- Support the activation of BCPs during actual disruptions or declared crisis situations.
- Maintain and regularly update the Emergency Call Tree / Notification Cascade, ensuring that all contact information, roles, and escalation paths are up to date and accessible.
- Conduct regular call tree testing to validate response readiness, accuracy of contact information, and escalation timelines.
- Provide administrative and coordination support to the Crisis Management Team (CMT) during incidents.
- Maintain crisis communication templates for internal staff advisories, external stakeholder updates, and regulatory notifications.
- Facilitate and document internal communication efforts during incidents, including time-stamped logs of alerts, escalations, and key decisions made.
- Lead or support post-incident reviews, identifying lessons learned and implementing necessary changes to improve the crisis response and communication process.
Reporting and Documentation
- Ensure proper documentation of all BCM-related activities, including BIA results, plan versions, test outcomes, training records, and incident logs.
- Prepare periodic status reports and dashboards for Senior Management and the BCM Committee highlighting the bank's continuity readiness, issues for resolution, and ongoing initiatives.
Job Qualifications:
Educational and Professional Certifications
- Must have a bachelor's degree from a college/university, preferably in business administration, information technology, or related field.
- Certifications in Business Continuity are an advantage.
Experience
- Experience in business continuity planning, risk management, or crisis response within a financial institution is preferred.
- Strong understanding of business processes, IT systems, and interdependencies.
- Experience in coordinating with cross-functional teams during planning, testing, or crisis events.
Technical Competencies (Know-how)
- Knowledge of regulatory requirements on business continuity (e.g., BSP Circulars).
- Ability to facilitate BIAs, risk assessments, and plan development across business units.
- Familiarity with crisis management and incident response frameworks.
Behavioral Competencies
- Strong communication, planning, and coordination skills.
- Ability to work under pressure and respond to urgent situations.
- Must possess all qualifications and none of the disqualifications required of an Officer under existing regulations.
