Business Continuity Management Analyst handles operational risk and disaster recovery coordination, requires 2–4 years relevant BCM or risk management experience (financial institution experience preferred). Full-time role in Nairobi.
Job Description
To coordinate the
implementation, monitoring and continuous improvement of the Bank’s Business
Continuity Management Programme in support of operational resilience,
regulatory compliance and preparedness for disruptive events.
The role executes and
coordinates Business Impact Analyses, Business Continuity Plan reviews, BCM
risk assessments, testing and exercising, technology recovery alignment,
critical supplier resilience assessments, awareness activities and BCM
reporting. Roles & Responsibilities
Responsibilities
BCM
Framework and governance
Support
the implementation, maintenance and continuous improvement of the Bank’s BCM
framework, policies, standards and procedures.
Monitor
implementation of BCM requirements across the Bank and coordinate remediation
or escalation of identified gaps.
Maintain
current, accurate and audit-ready BCM documentation and program records.
Promote
consistent application of BCM requirements across branches, Head Office units
and relevant support functions.
Business
Impact Analysis and continuity planning
Lead the
execution and annual review of Business Impact Analyses across business units
through stakeholder engagement, data collection, analysis and documentation.
Identify
and validate critical processes, disruption impacts, recovery objectives,
resource requirements and dependencies relating to people, premises, technology
and third parties.
Document
and confirm recovery strategies for all critical processes with the respective
process owners, including recovery priorities, procedures, manual workarounds
and alternative operating arrangements, and prepare BIA reports and executive
summaries for management review.
Coordinate
the review and maintenance of quarterly Business Continuity Plans for branches
and Head Office units.
Perform
quarterly BCM maturity assessments across branches and business units and
prepare maturity scorecards, trend analysis, and management reporting.
Review
BCP submissions for accuracy, completeness, consistency, and alignment with BCM
standards and regulatory requirements.
Review
BIAs and BCPs for accuracy, completeness and alignment with approved BCM
requirements, and coordinate correction of identified gaps.
Maintain
an accurate inventory of approved BIAs and BCPs and monitor completion of
reviews and agreed improvement actions.
Identify
gaps, inconsistencies, and control weaknesses that may result in regulatory
observations, audit findings, or operational resilience concerns and coordinate
corrective actions with process owners.
Disaster
Recovery Coordination and technology alignment
Coordinate
with ICT and business stakeholders to align technology disaster recovery
arrangements with approved business recovery requirements.
Maintain
records of critical systems, applications and technology dependencies
supporting priority business processes.
Coordinate
business participation in disaster recovery planning, testing and post-test
reviews.
Identify
and document gaps between required and demonstrated technology recovery
capabilities, monitor agreed actions and escalate material exceptions.
BCM
Testing and Exercising
Conduct
BCM risk assessments for branches, facilities and business units to identify
threats, vulnerabilities, control gaps and potential impacts on service
continuity.
Maintain
BCM risk registers and monitor implementation of agreed mitigation actions.
Coordinate
continuity assessments of critical suppliers and service providers in
collaboration with Procurement / Legal, ICT, business owners and other relevant
functions.
Maintain
records of critical supplier dependencies, assessment outcomes and agreed
remediation actions.
Ensure
identified continuity risks and third-party dependencies are appropriately
reflected in relevant BIAs, BCPs, risk registers and BCM reports.
Escalate
overdue, recurring or material continuity issues to the Senior Manager,
Business Continuity Management.
BCM
Awareness and stakeholder engagement
Coordinate
and facilitate BCM awareness and training activities across the Bank.
Provide
guidance to business units on BIA, BCP, testing, risk assessment and supplier
resilience requirements.
Monitor
participation in BCM awareness and training activities and maintain appropriate
records.
Coordinate
BCM activities with Operational Risk, ICT, Premises, Security and other
relevant stakeholders while maintaining clear functional accountability.
Build
effective working relationships to strengthen BCM awareness, accountability and
preparedness across the Bank.
Monitoring,
Reporting and Assurance
Maintain
BCM trackers covering BIA and BCP reviews, testing, risk assessments, supplier
resilience, training and programme improvement actions.
Prepare
monthly BCM dashboards, performance indicators and management reports
highlighting progress, material risks, overdue actions and areas requiring
management attention.
Support
periodic BCM maturity assessments and monitoring of programme improvement
initiatives.
Maintain
complete, accurate and audit-ready BCM records and supporting evidence.
Coordinate
BCM information and evidence required for internal audits, external audits,
regulatory reviews and certification activities.
Monitor
closure of BCM-related audit, regulatory and certification actions and escalate
material delays or unsupported closure submissions.
Stakeholder
Engagement and Advisory
Engage
with business units and support functions to facilitate implementation of BCM
requirements.
Provide
guidance on BIA completion, continuity planning, supplier resilience, risk
assessments, and testing requirements.
Support
coordination between BCM, Operational Risk, ICT, Facilities, Security,
Procurement, and other stakeholders involved in resilience activities.
Qualifications
Academic
& Professional Qualifications
Bachelor’s
degree in Risk Management, Business Administration, Operations Management, or a
related discipline.
Working
knowledge of Business Continuity Management principles, Business Impact
Analysis, continuity planning, risk assessment and exercising.
Professional
certification or formal training in Business Continuity Management, such as
CBCI, CBCP, ISO 22301 Lead Implementer, or an equivalent qualification.
Membership
in a recognized professional body is an added advantage.
Work
Experience Required
2 to 4
years’ relevant experience in Business Continuity Management, Operational Risk,
Enterprise Risk Management, disaster recovery coordination or a related
discipline.
Experience
within a regulated financial institution is preferred.
Practical
experience in Business Impact Analysis, continuity planning, BCM exercising,
risk assessment or resilience reporting is an added advantage.
