Business Continuity Management Analyst at I&M Bank

Job Description

• To coordinate the implementation, monitoring and continuous improvement of the Bank's Business Continuity Management Programme in support of operational resilience, regulatory compliance and preparedness for disruptive events.
• The role executes and coordinates Business Impact Analyses, Business Continuity Plan reviews, BCM risk assessments, testing and exercising, technology recovery alignment, critical supplier resilience assessments, awareness activities and BCM reporting. 

Roles & Responsibilities

BCM Framework and governance

• Support the implementation, maintenance and continuous improvement of the Bank's BCM framework, policies, standards and procedures.
• Monitor implementation of BCM requirements across the Bank and coordinate remediation or escalation of identified gaps.
• Maintain current, accurate and audit-ready BCM documentation and program records.
• Promote consistent application of BCM requirements across branches, Head Office units and relevant support functions.

Business Impact Analysis and continuity planning

• Lead the execution and annual review of Business Impact Analyses across business units through stakeholder engagement, data collection, analysis and documentation.
• Identify and validate critical processes, disruption impacts, recovery objectives, resource requirements and dependencies relating to people, premises, technology and third parties.
• Document and confirm recovery strategies for all critical processes with the respective process owners, including recovery priorities, procedures, manual workarounds and alternative operating arrangements, and prepare BIA reports and executive summaries for management review.
• Coordinate the review and maintenance of quarterly Business Continuity Plans for branches and Head Office units.
• Perform quarterly BCM maturity assessments across branches and business units and prepare maturity scorecards, trend analysis, and management reporting.
• Review BCP submissions for accuracy, completeness, consistency, and alignment with BCM standards and regulatory requirements.
• Review BIAs and BCPs for accuracy, completeness and alignment with approved BCM requirements, and coordinate correction of identified gaps.
• Maintain an accurate inventory of approved BIAs and BCPs and monitor completion of reviews and agreed improvement actions.
• Identify gaps, inconsistencies, and control weaknesses that may result in regulatory observations, audit findings, or operational resilience concerns and coordinate corrective actions with process owners.

Disaster Recovery Coordination and technology alignment

• Coordinate with ICT and business stakeholders to align technology disaster recovery arrangements with approved business recovery requirements.
• Maintain records of critical systems, applications and technology dependencies supporting priority business processes.
• Coordinate business participation in disaster recovery planning, testing and post-test reviews.
• Identify and document gaps between required and demonstrated technology recovery capabilities, monitor agreed actions and escalate material exceptions.

BCM Testing and Exercising

• Conduct BCM risk assessments for branches, facilities and business units to identify threats, vulnerabilities, control gaps and potential impacts on service continuity.
• Maintain BCM risk registers and monitor implementation of agreed mitigation actions.
• Coordinate continuity assessments of critical suppliers and service providers in collaboration with Procurement / Legal, ICT, business owners and other relevant functions.
• Maintain records of critical supplier dependencies, assessment outcomes and agreed remediation actions.
• Ensure identified continuity risks and third-party dependencies are appropriately reflected in relevant BIAs, BCPs, risk registers and BCM reports.
• Escalate overdue, recurring or material continuity issues to the Senior Manager, Business Continuity Management.

BCM Awareness and stakeholder engagement

• Coordinate and facilitate BCM awareness and training activities across the Bank.
• Provide guidance to business units on BIA, BCP, testing, risk assessment and supplier resilience requirements.
• Monitor participation in BCM awareness and training activities and maintain appropriate records.
• Coordinate BCM activities with Operational Risk, ICT, Premises, Security and other relevant stakeholders while maintaining clear functional accountability.
• Build effective working relationships to strengthen BCM awareness, accountability and preparedness across the Bank.

Monitoring, Reporting and Assurance

• Maintain BCM trackers covering BIA and BCP reviews, testing, risk assessments, supplier resilience, training and programme improvement actions.
• Prepare monthly  BCM dashboards, performance indicators and management reports highlighting progress, material risks, overdue actions and areas requiring management attention.
• Support periodic BCM maturity assessments and monitoring of programme improvement initiatives.
• Maintain complete, accurate and audit-ready BCM records and supporting evidence.
• Coordinate BCM information and evidence required for internal audits, external audits, regulatory reviews and certification activities.
• Monitor closure of BCM-related audit, regulatory and certification actions and escalate material delays or unsupported closure submissions.

Stakeholder Engagement and Advisory

• Engage with business units and support functions to facilitate implementation of BCM requirements.
• Provide guidance on BIA completion, continuity planning, supplier resilience, risk assessments, and testing requirements.
• Support coordination between BCM, Operational Risk, ICT, Facilities, Security, Procurement, and other stakeholders involved in resilience activities.

Job Specifications

Academic & Professional Qualifications

• Bachelor’s degree in Risk Management, Business Administration, Operations Management, or a related discipline.
• Working knowledge of Business Continuity Management principles, Business Impact Analysis, continuity planning, risk assessment and exercising. 
• Professional certification or formal training in Business Continuity Management, such as CBCI, CBCP, ISO 22301 Lead Implementer, or an equivalent qualification. 
• Membership in a recognized professional body is an added advantage.

Work Experience Required

• 2 to 4 years' relevant experience in Business Continuity Management, Operational Risk, Enterprise Risk Management, disaster recovery coordination or a related discipline. 
• Experience within a regulated financial institution is preferred. 
• Practical experience in Business Impact Analysis, continuity planning, BCM exercising, risk assessment or resilience reporting is an added advantage.