Company: Union Bank of the Philippines
Position: Resiliency Risk Head
Office Location: UnionBank Plaza, Ortigas, Pasig City
Job Summary
The Resiliency Risk Head is responsible for implementing the Bank's Enterprise Resilience Framework (ERF), integrating Business Continuity and Operational Resilience practices in line with BSP Circular 1203, BSP MORB 951, and ISO 22301 standards as part of second-line oversight.
The role ensures the Bank's preparedness, response, and recovery capabilities are adequate, coordinated, and embedded into enterprise risk management. The position oversees two functional pillarsBusiness Continuity Risk and Resilience Riskto maintain operational soundness and protect critical operations during disruption events.
Duties And Responsibilities
Governance and Framework Oversight
- Own and maintain the Enterprise Resilience Framework (ERF), BCM Policy, and related standards, ensuring Board approval and annual review.
- Oversee the annual review and update of the list of legal and regulatory requirements for both the BCMS and ORF, ensuring alignment with the latest regulatory changes.
- Coordinate with CCGO to validate regulatory requirements and ensure proper interpretation and implementation.
- Identify and maintain the inventory of critical operations, set impact tolerances, and ensure alignment with RTO/RPO targets.
- Led the Operational Resilience Steering Group, integrating inputs from ORM, InfoSec, IT, Facilities, and business units.
- Ensure the Bank's operational resilience posture complies with BSP Circular 1203 and supports the broader Operational and Resilience Risk Management agenda.
Strategic Oversight and Coordination
- Oversee the Business Continuity Risk function to ensure the effective execution of the BCM lifecycle, testing, and vendor continuity readiness.
- Oversee the Resilience Risk function to ensure robust incident lifecycle oversight, read-across analysis, and resilience assurance.
- Integrate insights from incidents, tests, and resilience scenarios into enterprise reporting and risk discussions.
- Coordinate with ORM for incident data governance and with the Reliability Center of Excellence (COE) for alignment with enterprise standards.
- Ensure that insights, incident learnings, and testing outcomes from the Resiliency Office are systematically embedded into first-line reliability standards and control practices through coordination with the Reliability Center of Excellence (COE), to sustain consistent governance and operational soundness across the enterprise.
Regulatory and Board Reporting
- Lead regulatory engagement for resilience-related submissions, including BSP 24-hour incident notifications, SAQs, and annual disclosures.
- Consolidate reports on resilience posture, critical operation mapping, testing results, and remediation status for Board and Management Committees.
- Represent the Bank during supervisory discussions or audits on business continuity and operational resilience.
Crisis Management and Culture Building
- Authorizes crisis activation upon recommendation of BCR Lead and ensures timely escalation to Senior Management.
- Serve as the Incident Management and Resilience Committee Secretariat during major disruptions.
- Oversee delivery of resilience awareness and training programs to promote preparedness and continuous improvement across business units.
- Foster a culture of reliability, learning, and accountability through consistent governance practices.
Qualifications
- Bachelor's degree required; postgraduate degree preferred.
- Minimum 710 years experience in banking operations, risk management, or business continuity.
- Proven experience leading enterprise-level resilience or continuity programs.
- Strong stakeholder management, regulatory interface, and strategic reporting experience.
- Certifications: ISO 22301 Lead Implementer/Auditor, CBCP, or related Operational Resilience certification preferred.
