Group Business Continuity Manager at CapitalSage Technology Limited

Job Purpose

• The Business Continuity Manager shall be responsible for developing, implementing, maintaining, and continuously improving the Group’s Business Continuity Management System (BCMS) framework tensure operational resilience across all subsidiaries and business units. The role ensures the Group can effectively respond to, recover from, and continue critical operations during disruptions arising from operational failures, cyber incidents, natural disasters, regulatory issues, pandemics, security threats, or other crises. The Business Continuity Manager shall coordinate business continuity planning across the Group’s diverse business operations, including subsidiaries, operational locations and third-party service providers, while ensuring compliance with regulatory and international standards such as International Organization for Standardization IS22301.

Key Responsibilities

Business Continuity Management System (BCMS) Framework Development

• Develop, implement, and maintain the Group-wide Business Continuity Management System (BCMS) Framework.
• Establish BCM policies, standards, procedures, and governance structures.
• Ensure BCM framework aligns with the Group’s strategic objectives, enterprise risk management framework, and regulatory requirements.
• Periodically review and update continuity policies and procedures treflect emerging risks and operational changes.
• Drive enterprise-wide resilience initiatives across all subsidiaries and business units. 

Business Impact Analysis (BIA)

• Conduct Business Impact Analysis (BIA) across subsidiaries, departments and business locations tidentify:
• Critical business processes
• Recovery priorities
• Recovery Time Objectives (RTO)
• Recovery Point Objectives (RPO)
• Operational dependencies
• Assess financial, operational, legal, reputational, and regulatory impacts of disruptions.
• Maintain updated inventory of critical systems, applications, personnel, vendors, and infrastructure.

Business Continuity Planning

• Develop and maintain Business Continuity Plans (BCPs) for all businesses.
• Coordinate creation of:
• Crisis management plans
• Incident response procedures
• Emergency response plans
• Pandemic response plans
• Disaster recovery plans
• Ensure all continuity plans are properly documented, approved, tested, and periodically reviewed.
• Integrate continuity plans across subsidiaries tensure enterprise-wide coordination.

Crisis Management and Incident Coordination

• Coordinate response activities during operational disruptions and crisis events.
• Serve as Secretary or Coordinator of the Crisis Management Committee.
• Support executive management during emergencies by providing situational analysis and recovery recommendations.
• Ensure proper escalation and communication during incidents.
• Coordinate post-incident reviews and lessons-learned assessments.

Disaster Recovery Coordination

• Work closely with Information Technology teams talign IT Disaster Recovery (DR) capabilities with business continuity objectives.
• Monitor adequacy of backup arrangements, alternate sites, and recovery infrastructure.
• Ensure recovery solutions support critical business operations within approved recovery timelines.
• Participate in disaster recovery testing and validation exercises 

Testing, Simulation, and Exercises

• Develop annual BCM testing schedules for the Group.
• Conduct:
• Tabletop exercises
• Simulation exercises
• Evacuation drills
• System recovery tests
• Crisis communication tests
• Evaluate test results and track remediation of identified gaps.
• Prepare test reports and improvement action plans. 

Regulatory Compliance and Audit Coordination

• Ensure compliance with applicable regulatory requirements and industry standards.
• Liaise with regulators, external auditors, and internal auditors on BCM-related matters.
• Coordinate remediation of audit findings and regulatory observations.
• Maintain adequate documentation and evidence for compliance reviews.

Training and Awareness

• Develop BCM awareness programs across the Group.
• Conduct training for employees, management, crisis response teams, and BC Champions across subsidiaries.
• Promote business continuity culture and operational resilience awareness.
• Organize periodic sensitization campaigns and workshops.
• 9. Vendor and Third-Party Resilience Management
• Assess business continuity capabilities of critical vendors and outsourced service providers.
• Review third-party recovery arrangements and contingency plans.
• Ensure continuity clauses are incorporated intvendor contracts and service-level agreements.
• Monitor concentration and dependency risks associated with external providers.

Risk Assessment and Monitoring

• Identify emerging threats that may impact business continuity, including:
• Cybersecurity threats
• Political instability
• Infrastructure failures
• Environmental risks
• Supply chain disruptions
• Conduct continuity risk assessments periodically.
• Track and report key resilience indicators and continuity metrics.

Reporting and Governance

• Prepare periodic BCM reports for:
• Executive Management
• Board Audit and Risk Committee (BARC)
• Regulators
• Present continuity readiness status, test outcomes, incident reports, and remediation progress.
• Maintain BCM dashboards and key risk indicators.

Requirements

Educational Qualifications

• Bachelor’s degree in: Business Administration, Risk Management, Information Systems, Finance, Engineering, Computer Science Or related discipline
• Master’s degree or MBA is an advantage.

Professional Certifications

• Preferred certification includes any of:
• IS22301 Lead Implementer,
• Certified Business Continuity Professional (CBCP),
• Certified Crisis Management Professional,
• Disaster Recovery Institute International certifications,
• Business Continuity Institute certifications
• Any of the following risk management or audit certifications is an added advantage: CRISC, FRM, CRM, CISA

Required Experience

• 5–10 years relevant experience in:
• Business continuity
• Enterprise risk management
• Operational resilience
• Disaster recovery
• Internal control
• Crisis management