Business Continuity Specialist

BUSINESS CONTINUITY MANAGEMENT SPECIALIST

We are looking for a Business Continuity Management Specialist to support the development, implementation, and continuous improvement of an organization's Business Continuity Management (BCM) and Operational Resilience Program.

The role will help ensure the organization is prepared to respond to and recover from operational disruptions by supporting the full BCM lifecycle, including Business Impact Analysis (BIA), Risk Assessment, Business Continuity Strategy, Business Continuity Plan (BCP) Development, Testing and Exercises, Plan Maintenance, Training, and Incident/Crisis Management.

The successful candidate will work closely with cross-functional stakeholders to strengthen organizational resilience, assess business continuity risks, support regulatory compliance, and ensure critical business operations can continue during disruptions.

KEY RESPONSIBILITIES

Business Impact Analysis & Risk Assessment

• Conduct Business Impact Analyses (BIA) to identify critical business functions, processes, systems, resources, and dependencies.
• Assess the potential financial, operational, reputational, customer, and regulatory impacts of business disruptions.
• Conduct business continuity and operational resilience risk assessments to identify threats, vulnerabilities, and potential areas of disruption.
• Assess risks arising from natural hazards, technology failures, cyber incidents, operational disruptions, and third-party dependencies.
• Collaborate with business and functional leaders to identify critical processes and establish appropriate recovery objectives and requirements.
• Document assessment results and recommend appropriate risk mitigation and resilience measures.

Business Continuity Strategy & Planning

• Develop and recommend business continuity and resilience strategies to support the continuity of critical business operations.
• Develop, maintain, and document Business Continuity Plans (BCPs) for critical functions and processes.
• Develop response and recovery procedures for severe but plausible disruption scenarios.
• Ensure BCPs are practical, actionable, current, and accessible to relevant stakeholders.
• Incorporate appropriate crisis communication and escalation procedures into continuity plans.
• Work with IT, Operations, Facilities, Risk, Compliance, and other functions to ensure continuity strategies are aligned with business requirements and applicable regulatory standards.

Testing & Exercises

• Plan, coordinate, and facilitate business continuity exercises, including tabletop exercises, simulations, drills, and other testing activities.
• Coordinate with business units and cross-functional teams to ensure appropriate participation and preparedness.
• Document exercise scenarios, objectives, results, observations, and identified gaps.
• Analyze testing results and recommend corrective and improvement actions.
• Track remediation activities and ensure identified gaps are addressed within agreed timelines.
• Maintain complete records of BCM testing and exercises for audit and regulatory purposes.

BCM Maintenance & Continuous Improvement

• Regularly review and update Business Continuity Plans, procedures, recovery requirements, contact lists, and related documentation.
• Ensure BCM documentation reflects changes in business processes, organizational structure, technology, regulatory requirements, and risk profiles.
• Maintain appropriate version control and documentation standards.
• Conduct periodic gap assessments to evaluate the effectiveness and relevance of BCM plans and processes.
• Identify opportunities to strengthen business resilience and continuously improve the BCM program.

Training & Awareness

• Develop and facilitate business continuity training and awareness programs for employees.
• Conduct awareness activities to ensure employees understand their roles and responsibilities during disruptions.
• Support training and preparedness activities for Business Continuity and Crisis Management Teams.
• Facilitate exercises and workshops to strengthen organizational readiness.
• Monitor training effectiveness and recommend improvements.

Incident & Crisis Management

• Support Incident and Crisis Management activities during operational disruptions and emergency situations.
• Assist in activating and implementing applicable incident response and business continuity procedures.
• Coordinate information and communication among relevant internal stakeholders during incidents.
• Support crisis communication and escalation activities as required.
• Document incidents, response actions, decisions, and recovery activities.
• Participate in post-incident reviews to identify lessons learned, root causes, control gaps, and improvement opportunities.
• Track corrective and preventive actions resulting from incident reviews.

Third-Party Business Continuity

• Assess the business continuity and resilience capabilities of third-party vendors, suppliers, service providers, and other critical external partners.
• Conduct or coordinate third-party BCM assessments to evaluate preparedness, recovery capabilities, and compliance with applicable requirements.
• Review relevant third-party BCPs, recovery arrangements, testing results, and supporting documentation.
• Identify risks associated with critical third-party dependencies and recommend appropriate mitigation measures.
• Monitor remediation of identified third-party BCM gaps.

Audit & Regulatory Support

• Support internal audits, regulatory assessments, and examinations relating to business continuity and operational resilience.
• Prepare documentation and supporting evidence required for regulatory and audit activities.
• Work closely with Risk Management, Compliance, Internal Audit, IT, and business units to address audit findings and regulatory observations.
• Track corrective actions and ensure remediation activities are properly documented.
• Maintain accurate records of BIAs, risk assessments, BCPs, testing results, training activities, incident records, third-party assessments, and other BCM documentation.
• Assist in responding to regulatory inquiries and reporting requirements related to business continuity and operational resilience.

QUALIFICATIONS

• Bachelor's degree in Earth Science, Meteorology, Environmental Science, Disaster Risk Management, or a related field.
• 3–5 years of relevant experience in Business Continuity Management, Incident Management, Risk Management, Operational Resilience, Disaster Risk Reduction, or a related field.
• Experience in financial services, banking, fintech, or another regulated industry is an advantage.
• Working knowledge of Business Continuity Management principles and lifecycle.
• Knowledge of ISO 22301 and applicable business continuity and operational resilience regulatory requirements.
• Familiarity with BSP Circular No. 951 and BSP Circular No. 1203 is preferred.
• Understanding of Incident/Crisis Management, Risk Management, Disaster Risk Reduction, and Operational Resilience.

TECHNICAL SKILLS

• Proficiency in Microsoft Excel, including formulas, pivot tables, and macros.
• Basic knowledge of Microsoft Power BI and Power Automate for reporting, dashboards, and workflow development.
• Strong analytical and problem-solving skills.
• Strong documentation and organizational skills.
• Excellent written and verbal communication skills.
• Ability to facilitate training sessions, workshops, tabletop exercises, and business continuity drills.
• Ability to work effectively with cross-functional stakeholders.
• Strong attention to detail and ability to manage multiple priorities.

ENVIRONMENTAL & INCIDENT MONITORING

The role requires the ability to monitor and interpret information from relevant government and disaster-monitoring agencies and platforms, including:

• PAGASA
• PHIVOLCS
• NDRRMC
• Weather forecasting and hazard monitoring platforms
• Emergency and mass notification applications

The successful candidate should be comfortable monitoring weather, seismic, volcanic, and other environmental alerts and assessing their potential impact on business operations.

PREFERRED CERTIFICATIONS

The following certifications are advantageous but not required:

• ISO 22301 Lead Implementer or Lead Auditor
• Business Continuity Institute (BCI) Certification
• Disaster Recovery Institute International (DRII) certification, such as ABCP or CBCP

IDEAL CANDIDATE

The ideal candidate is a detail-oriented, analytical, and proactive business continuity professional who can translate operational risks into practical continuity and recovery strategies.

You should be comfortable working with multiple stakeholders, facilitating business continuity exercises, reviewing risks and recovery plans, supporting incident response, and maintaining detailed documentation for audit and regulatory requirements.

The role also requires someone who can remain organized, responsive, and composed during incidents and emergency situations, while effectively coordinating with different teams to support business continuity.

Employment Type: Full-time