Business Continuity Specialist

About the role

The BCM Officer plays a crucial role in ensuring the operational resilience of the Company through effective business continuity management practices. The role is responsible for the development, implementation, and maintenance of the Company's business continuity, disaster recovery, incident response, and crisis management capabilities, and for the day-to-day administration of the Company's operational resilience framework, in compliance with BSP Circular No. 951 (Business Continuity Management Guidelines), BSP Circular No. 971 (Guidelines on Risk Governance), BSP Circular No. 1203 (Guidelines on Operational Resilience), and other related rules, regulations, and industry standards.

Key responsibilities

• Maintain the Company's business continuity and operational resilience framework and ensure its integration with related risk management processes, including operational risk, information security and cyber resilience, third party risk, and enterprise risk management.

• Identify and periodically validate critical operations and their supporting dependencies, including people, processes, technology, information, facilities, and service providers.

• Develop, implement, and maintain business continuity, disaster recovery, incident response, and crisis management plans and their supporting procedures.

• Conduct and maintain business impact analysis and recommend recovery objectives and tolerances for disruption for approval through the prescribed governance route.

• Provide business continuity and resilience input to risk assessments of projects, new products, services, systems, service providers, and material changes to existing processes.

• Investigate incidents and near misses that disrupt or may disrupt critical operations, including determination of root cause, control gaps, and actual and potential impact.

• Develop, maintain, and periodically review business continuity and operational resilience key risk indicators, ensuring that each indicator is measurable and supported by a defined data source, owner, and reporting frequency.

• Develop and implement the periodic testing and exercise program covering severe but plausible disruption scenarios relevant to the Company's business and risk profile.

• Assess the continuity and recovery capability of critical service providers and their ability to support the Company's tolerance for disruption.

• Maintain BCM policies, procedures, and registers in compliance with applicable regulatory issuances and industry standards, and monitor regulatory developments affecting business continuity and operational resilience.

About you

• Bachelor's degree in business, management, industrial engineering, information technology, or a related field.

• At least three (3) years of relevant experience in business continuity management, operational resilience, disaster recovery, operational risk management, or internal audit, preferably with a bank, electronic money issuer, payment service provider, or other BSP supervised financial institution.

• Familiarity with, or with demonstrated working knowledge of relevant BSP issuances on business continuity, risk governance, and operational resilience, and of recognized standards such as ISO 22301.

• Demonstrated ability to conduct business impact analysis and dependency mapping.

• Professional certification in business continuity, risk management, or audit (e.g., CBCP, CBCI, ISO 22301), is an advantage.