Manager, Business Continuity Planning & Compliance at KCB Bank Kenya

KEY RESPONSIBILITIES: 

Technology Resilience & Recovery.

• Mandate the Group-wide Technology BCM and Operational Resilience strategy, ensuring alignment with ISO 22301, global best practices, evolving regional regulatory mandates (e.g., CBK Prudential Guidelines) while integrating modern Cloud-Native resilience patterns, Automated DR Failover Orchestration, and Infrastructure as Code (IaC) for automated recovery. 
• Partner with Group Cybersecurity to design and test specialized "Cyber Recovery Playbooks" (e.g., Ransomware recovery, immutable backups) to defend against and rapidly recover from destructive cyber-attacks. 

DR Failover Simulations Orchestration & Testing. 

• Direct and orchestrate multi-jurisdictional Disaster Recovery (DR) and Cyber Resilience failover simulations for the Group’s Core Banking and Tier-1 applications, rigorously validating strict Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). 
• Develop technology-related crisis management frameworks and facilitate IT DRP simulation exercises (Tabletop drills) for the Group Technology teams. 

High-Availability (HA) & BIA.

• Challenge Enterprise Architects and system owners on High Availability and redundancy designs; exercise authority to mandate the elimination of Single Points of Failure (SPOFs) across physical data centers and decentralized Multi-Cloud/Containerized architectures.
• Lead Business Impact Analyses (BIA) and IT Threat/Vulnerability assessments to proactively align technology recovery strategies with business demands.

Third-Party Cloud Resilience & Supply Chain Governance.

• Execute resilience audits and risk assessments of critical third-party technology vendors, SaaS/PaaS Cloud Service Providers (CSPs), and FinTech partners to prevent supply chain disruptions and mitigate systemic concentration risks. 

Executive Reporting & Remediation Enforcement 

• Design high-impact Operational Resilience dashboards and present strategic BCM risk profiles and compliance postures to the Group Risk Management Committee and the Board. 
• Mandate and strictly track the closure of critical vulnerabilities, architectural gaps, and lessons learned identified during DR simulation exercises to their logical conclusion. 

 Experience 

• Total Minimum No of Years’ Experience Required 5

Education

• Bachelor’s Degree Computer Science, Information Systems, Information Security or a related IT field
• Master’s Degree Master’s degree in business or IT
• Professional Qualifications Business Continuity / Resilience  CBCP (Certified Business Continuity Professional), AMBCI, MBCI, or ISO 22301 Lead Implementer / Auditor. 
• Technology Governance & Security     CISA, CISM, CISSP, CRISC, or ITIL v4