Job Purpose
The Business Continuity Management Specialist/Manager is responsible for developing, implementing, testing, and maintaining robust Business Continuity Plans (BCPs) to ensure the continuous functioning of the bank during operational disruptions. This role involves active participation in operational risk management and ensuring the unit's readiness to respond to and recover from various incidents.
Job Duties & Responsibilities
BZM Attestation
- Assess the effectiveness of existing BCM plans, procedures, and controls.
- Identify gaps and any residual risks for all units across the bank, documenting the findings in a formal attestation report.
- Present the attestation report to the Country Head, Business Risk Management Committee (BRMC), and Senior Management, highlighting key findings and recommendations.
Crisis Communication and BCM Exercises
- Conduct at least one Crisis Communication Exercise annually using the SIREN system.
- Initiate the automatic call tree notification tool via SIREN for effective crisis communication.
BCM Exercises:
- Perform walkthrough or tabletop exercises specifically focused on CBS functions to assess preparedness and identify challenges.
- Complete all mandatory bank-wide BCM exercises for all Units as per the BCM Policy & Standards. This includes Scenario-Based Full Simulation Exercises, Tabletop Exercises, Staff Recall, and Emergency Evacuation drills.
- Document all exercise findings, including identified gaps and areas for improvement. Implement corrective actions to enhance future preparedness.
Critical Business Services (CBS) Management
- Conduct comprehensive end-to-end reviews, mapping, and testing of all Critical Business Services.
- Perform an annual review of all CBS.
- Work collaboratively with all Units across the bank to conduct:
- Business Impact Analysis (BIA)
- Business Continuity Plans (BCP)
- SIREN (Crisis Communication System)
- Incident Management
- BCP Drills
- BCM Attestation for each entity.
NPA/ORR
- Evaluate all New Product Approvals (NPAs) / Operational Risk Reviews (ORRs) against the bank's policies, standards, and regulatory guidelines from a BCM perspective.
- Review NPA/ORR processes to address evolving BCP needs and risks.
- Identify and mitigate risks associated with NPAs/ORRs, including their potential impact on business continuity.
- Ensure that the CBS supporting NPA/ORR meets its requirements.
Training and Development
- Ensure that all BCM Personnel and SDM/SDMM (SPOCs) are adequately trained on all BCM updates.
Third-Party Governance
- Conduct thorough due diligence on Outsourcing Service Providers (OSPs), Sub-Vendors, and New Outsourcing Arrangements (NOAs) with a medium to high-risk profile.
- Where appropriate, conduct site visits to evaluate vendor business continuity plans and capabilities. This includes reviewing their BCPs, disaster recovery capabilities, and potential business continuity risks.
- Review high and medium-risk NOA profiles.
- Whenever feasible, conduct surprise tests to assess real-time preparedness and response capabilities of third parties.
- Ensure that CBS vendors meet Service Recovery Time Objective (SRTO) and alternate/in-ho
Validation, Risk Assessment, and BCP Audit
- Ensure the reliability and resilience of CBS and business operations through validation, risk assessment, and BCP audits.
- Validate CBS, its internal and third-party dependencies, and identify gaps in Service Recovery Time Objectives (SRTOs).
- Conduct a thorough audit of the existing BCP, identifying weaknesses or areas requiring improvement. Quantify residual risk following the audit and develop recommendations to mitigate identified risk
Core Competencies
- Strong understanding of Business Continuity Management (BCM) framework, policies, and standards.
- Proven experience in developing, implementing, testing, and maintaining BCPs and BIAs.
- Ability to identify and manage operational risks effectively.
- Excellent communication, interpersonal, and organizational skills.
- Ability to work independently and collaboratively within a team.
Technical Competencies
Proficiency in using BCM tools and systems (e.g., BCMM, SIREN).
Required Experience
- 6–10 years of experience in BCM operations
- Experience in enterprise or BFSI environments preferred
- Familiarity with regulatory and audit requirements
Education / Preferred Qualifications
Post-Graduation: MBA/MCA
Location:
Mumbai
Job:
Business Resilience & Security
Schedule:
Regular
Employee Status:
Full time