Manager, Business Continuity Planning & Compliance

Role Overview

The Manager, Business Continuity Planning & Compliance is responsible for defining, driving, and overseeing the Group-wide Technology Business Continuity Management (BCM), Disaster Recovery (DR), and Operational Resilience strategies. The role ensures alignment with international standards like ISO 22301, local regulatory requirements (e.g., CBK Prudential Guidelines), and modern technology architectures including cloud and containerized environments.

Key Responsibilities

• Technology Resilience & Recovery: Mandate the Group-wide Technology BCM and Operational Resilience strategy, ensuring alignment with ISO 22301, global best practices, and evolving regional regulatory mandates (e.g., CBK Prudential Guidelines). Integrate modern Cloud-Native resilience patterns, Automated DR Failover Orchestration, and Infrastructure as Code (IaC) for automated recovery. Partner with Group Cybersecurity to design and test specialized Cyber Recovery Playbooks (e.g., Ransomware recovery, immutable backups) to defend against and rapidly recover from destructive cyber-attacks.
• DR Failover Simulations Orchestration & Testing: Direct and orchestrate multi-jurisdictional Disaster Recovery (DR) and Cyber Resilience failover simulations for the Group's Core Banking and Tier-1 applications, rigorously validating strict Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). Develop technology-related crisis management frameworks and facilitate IT DRP simulation exercises (Tabletop drills) for the Group Technology teams.
• High-Availability (HA) & BIA: Challenge Enterprise Architects and system owners on High Availability and redundancy designs; exercise authority to mandate the elimination of Single Points of Failure (SPOFs) across physical data centers and decentralized Multi-Cloud/Containerized architectures. Lead Business Impact Analyses (BIA) and IT Threat/Vulnerability assessments to proactively align technology recovery strategies with business demands.
• Third-Party Cloud Resilience & Supply Chain Governance: Execute resilience audits and risk assessments of critical third-party technology vendors, SaaS/PaaS Cloud Service Providers (CSPs), and FinTech partners to prevent supply chain disruptions and mitigate systemic concentration risks.
• Executive Reporting & Remediation Enforcement: Design high-impact Operational Resilience dashboards and present strategic BCM risk profiles and compliance postures to the Group Risk Management Committee and the Board. Mandate and strictly track the closure of critical vulnerabilities, architectural gaps, and lessons learned identified during DR simulation exercises to their logical conclusion.

Requirements & Qualifications

• Experience: Minimum 5 years of relevant experience.
• Education: Bachelor’s Degree in Computer Science, Information Systems, Information Security, or a related IT field. Master’s degree in Business or IT is preferred.
• Professional Qualifications: Business Continuity / Resilience certifications such as CBCP (Certified Business Continuity Professional), AMBCI, MBCI, or ISO 22301 Lead Implementer / Auditor.
• Technology Governance & Security Certifications: CISA, CISM, CISSP, CRISC, or ITIL v4.