Business Continuity and Data Protection Lead

The Business Continuity and Data Protection Lead role shall manage day to day execution of the Business Continuity and Data Privacy activities across the GBS organization. These activities include but are not limited to:

• Acts as a support role to the Data Privacy Officer to ensure compliance to the Data Privacy Act of the Philippines. Reports key metrics to measure effectivity of Data Protection activities.
• Business Continuity Management and Reporting - maintains process documentations and ensure they are kept relevant and accurate. Reports key metrics to measure effectivity of the Business Continuity Plan.
• Flag issues and risks on BCP and Data Protection as they arise.
• Liaison with Crisis Management and Emergency Response Teams
• Performs periodic program reviews through regular audits, testing and version controls
• Ensures awareness of BCP and Data Protection initiatives across the GBS organization.

Job Responsibilities

• Conduct periodic business impact assessments with GBS Department Heads to ensure that teams are compliant with response and recovery documentations, quantify business continuity requirements and identify Plans enhancements
• Lead in the development and/or upgrading of tactical business continuity and disaster recovery plans and procedures
• Coordinate regular updates to the detailed information supporting the business continuity procedures (e.g. contact lists, regulatory changes, backup location details, etc.)
• Ensure GBS BC Focals & Emergency Response Teams (ERT) are trained to accomplish assigned BC responsibilities
• Conducts awareness programs with respective departments across GBS to ensure effective understanding of business continuity and disaster recovery strategies
• Assists with the execution of business continuity and disaster recovery plans
• Providing 7x24 on-call support for any emergency, which may require activation of all or part of the Business Continuity Plans
• Serves as liaison between the Crisis Management Team (i.e. senior management) and the Emergency Response Teams (i.e. the teams recovering operations at the alternate facilities and the teams restoring operations at the home office)
• Develop and implement communication plans aligned with GBS BC Plan:
  . formulating clear and concise messages
  . selecting appropriate communication channels, and
  . timely & consistent dissemination of information to external and internal stakeholders
• Support the Data Privacy Officer (DPO) in the implementation and enforcement of controls arising out of the Data Privacy Policy
• Assist the DPO in conducting PIAs at the initiation of any new/ modified business process, facility, service or technology that may impact the GBS privacy posture
• Maintain a GBS-wide view of business processes impacting privacy, and the nature, size and sensitivity of personal information held by the GBS
• Maintain the inventory of personal data processing systems and inventory of personal data collected, used and stored in their respective locations, ensuring reconciliation with the information asset inventory
• Perform periodic review and update of the inventory of personal data processing systems and inventory of personal data collected, used and stored in respective departments/business units
• Coordinate efforts for periodic privacy compliance reviews
• Ensure that privacy risk mitigation strategies are implemented, under the guidance of the DPO
• Respond to data breach notifications as per the defined data breach response plan
• Ensure that registrations and notifications are maintained and are up to date
• Periodically meet with and report to DPO for updates and realignment on data privacy concerns
• Ensure Business Continuity Plan components are tested at least annually, or whenever significant changes are made on those components
• Plan and coordinate at least one simulation exercise annually involving critical business units
• Analyzes testing / exercise performance & results and identify recommended improvements as needed
• Assess the BC-related impact of organizational / technical changes
• Coordinate the changes to the existing Business Continuity Plans and Procedures
• Participates in external business continuity management organizations and keep abreast of industry best practices and trends

Job Requirements

• Strong background / knowledge on Business Continuity Management, Data Privacy and Protection, current labor legislations
• Certified Business Continuity Practitioner knowledgeable in either DRI (US), MBCI (UK), NFPA 1600 or ISO 22301
• 5-7 years of experience of working in Business Continuity, preferably within the financial services sector
• Experience of crisis and/or incident management processes
• Experience on Data Privacy preferably as Compliance Officer for Privacy
• Must possess the ability to be a team player, self-starter, read, analyze and interpret technical procedures/documentation, work with little supervision and make recommendations based on available data points
• Must be able to explain all aspects of Business Continuity and transform this knowledge into the Goodyear business framework
• Highly developed relationship management, influencing and leadership skills
• Excellent communication skills, especially related to facilitation, documentation and reporting.
• After-hours work or performance of other duties will be required as requested, directed or assigned

#LI-Hybrid

Goodyear is an Equal Employment Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to that individual's race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender identity, age, physical or mental disability, ethnicity, citizenship, or any other characteristic protected by law.