Group Business Continuity Manager

Job Purpose

The Business Continuity Manager shall be responsible for developing implementing maintaining and continuously improving the Groups Business Continuity Management System (BCMS) framework to ensure operational resilience across all subsidiaries and business units. The role ensures the Group can effectively respond to recover from and continue critical operations during disruptions arising from operational failures cyber incidents natural disasters regulatory issues pandemics security threats or other crises. The Business Continuity Manager shall coordinate business continuity planning across the Groups diverse business operations including subsidiaries operational locations and third-party service providers while ensuring compliance with regulatory and international standards such as International Organization for Standardization ISO 22301.

Key Responsibilities

1. Business Continuity Management System (BCMS) Framework Development

Develop implement and maintain the Group-wide Business Continuity Management System (BCMS) Framework.

Establish BCM policies standards procedures and governance structures.

Ensure BCM framework aligns with the Groups strategic objectives enterprise risk management framework and regulatory requirements.

Periodically review and update continuity policies and procedures to reflect emerging risks and operational changes.

Drive enterprise-wide resilience initiatives across all subsidiaries and business units.

2. Business Impact Analysis (BIA)

Conduct Business Impact Analysis (BIA) across subsidiaries departments and business locations to identify:

o Critical business processes

o Recovery priorities

o Recovery Time Objectives (RTO)

o Recovery Point Objectives (RPO)

o Operational dependencies

Assess financial operational legal reputational and regulatory impacts of disruptions.

Maintain updated inventory of critical systems applications personnel vendors and infrastructure.

3. Business Continuity Planning

Develop and maintain Business Continuity Plans (BCPs) for all businesses.

Coordinate creation of:

o Crisis management plans

o Incident response procedures

o Emergency response plans

o Pandemic response plans

o Disaster recovery plans

Ensure all continuity plans are properly documented approved tested and periodically reviewed.

Integrate continuity plans across subsidiaries to ensure enterprise-wide coordination.

4. Crisis Management and Incident Coordination

Coordinate response activities during operational disruptions and crisis events.

Serve as Secretary or Coordinator of the Crisis Management Committee.

Support executive management during emergencies by providing situational analysis and recovery recommendations.

Ensure proper escalation and communication during incidents.

Coordinate post-incident reviews and lessons-learned assessments.

5. Disaster Recovery Coordination

Work closely with Information Technology teams to align IT Disaster Recovery (DR) capabilities with business continuity objectives.

Monitor adequacy of backup arrangements alternate sites and recovery infrastructure.

Ensure recovery solutions support critical business operations within approved recovery timelines.

Participate in disaster recovery testing and validation exercises

.6. Testing Simulation and Exercises

Develop annual BCM testing schedules for the Group.

Conduct:

o Tabletop exercises

o Simulation exercises

o Evacuation drills

o System recovery tests

o Crisis communication tests

Evaluate test results and track remediation of identified gaps.

Prepare test reports and improvement action plans.

7. Regulatory Compliance and Audit Coordination

Ensure compliance with applicable regulatory requirements and industry standards.

Liaise with regulators external auditors and internal auditors on BCM-related matters.

Coordinate remediation of audit findings and regulatory observations.

Maintain adequate documentation and evidence for compliance reviews.

8. Training and Awareness

Develop BCM awareness programs across the Group.

Conduct training for employees management crisis response teams and BC Champions across subsidiaries.

Promote business continuity culture and operational resilience awareness.

Organize periodic sensitization campaigns and workshops.

9. Vendor and Third-Party Resilience Management

Assess business continuity capabilities of critical vendors and outsourced service providers.

Review third-party recovery arrangements and contingency plans.

Ensure continuity clauses are incorporated into vendor contracts and service-level agreements.

Monitor concentration and dependency risks associated with external providers.

10. Risk Assessment and Monitoring

Identify emerging threats that may impact business continuity including:

o Cybersecurity threats

o Political instability

o Infrastructure failures

o Environmental risks

o Supply chain disruptions

Conduct continuity risk assessments periodically.

Track and report key resilience indicators and continuity metrics.

11. Reporting and Governance

Prepare periodic BCM reports for:

Executive Management

Board Audit and Risk Committee (BARC)

Regulators

Present continuity readiness status test outcomes incident reports and remediation progress.

Maintain BCM dashboards and key risk indicators.

Educational Qualifications

Bachelors degree in: Business Administration Risk Management Information Systems Finance Engineering Computer Science Or related discipline

Masters degree or MBA is an advantage.

Professional Certifications

Preferred certification includes any of:

o ISO 22301 Lead Implementer

o Certified Business Continuity Professional (CBCP)

o Certified Crisis Management Professional

o Disaster Recovery Institute International certifications

o Business Continuity Institute certifications

Any of the following risk management or audit certifications is an added advantage: CRISC FRM CRM CISA

Required Experience

510 years relevant experience in:

o Business continuity

o Enterprise risk management

o Operational resilience

o Disaster recovery

o Internal control

o Crisis management

Experience within diversified groups financial institutions fintech telecommunications manufacturing or regulated industries is highly desirable.

Experience coordinating enterprise-wide resilience initiatives across multiple subsidiaries is an advantage.