Job Purpose

The Assistant Manager Business Continuity Risk supports in continually improving the Bank’s Business Continuity Risk (“BCR”) framework, thereby strengthening the Bank’s resilience and readiness in the face of evolving threats and risks. He / She plays a key role in driving the ongoing development of the Bank’s Disaster Recovery (“DR”) capabilities. He / She establishes and maintains close and productive working ties with business groups and support functions to facilitate requirements, information exchange, and management of initiatives aimed at achieving the Bank’s defined BCR and DR-related objectives.

Key Responsibilities

Strategy, Planning and Management

Planning and Management

• Support in shaping the Bank’s BCR and IT DR policies in line with the organization’s goals and priorities, regulatory requirements and best practices.
• Support in defining and periodically reviewing the strategic roadmap for BCR, as reflected in the Bank’s BCR and IT DR policies.

Operations, Review and Reporting

Understanding

• Maintain updated knowledge of rules, regulations and standards in the related field and related matters of interest to the department.
• Demonstrate full awareness and understanding of all applicable internal and external (i.e. regulatory and legal) requirements impacting BCR.
• Stay up-to-date on standards and best practices relevant to BCR.
• Identify relevant opportunities to improve knowledge and skills through training and development.
• Coordinate efforts to exchange information, ideas and best practices relevant to BCR across the Burgan Bank Group.

Fieldwork

• Support in defining, continually improving and successfully executing the BIA process applied by BCR.
• Support in defining, testing and continually improving BC and IT DR plans to strengthen the Bank’s resilience and readiness in the face of evolving threats and risks.
• Ensure that BC and IT DR plans are comprehensive, up-to-date and in line with the dynamic output of the BIA process.
• Participate in periodic visits to the Local BC Recovery & IT DR Sites to assess the sites readiness and performance.
• Demonstrate SME (Subject Matter Expertise) on the BCR Solution (Software) to maintain relevant BC Plans, BIAs, TRAs and other related documentation & records as per the business requirements.
• Ensure full awareness on CBK’s Cyber Crisis Framework and contribute BCR inputs and support for maintaining & reviewing the overall Cyber resilience from BCR perspective in coordination with the ICSD and other stakeholders.
• Keeping up to date with developments in BCR standard and other ISO standards (mainly ISO 22301:2019) and actively contribute in achieving the ISO certification & provide all the necessary support to maintain the ISO standard compliance.
• Ensure that BC and IT DR plans are in line with the latest assessment.
• Coordinate efforts to exchange information, ideas and best practices relevant to BCR across Burgan Bank Group (Subsidiaries).
• Support review of the BCR/DR framework of the subsidiaries and assist them to develop a robust BCR governance model. Monitor the review of BCR Threat Risk Assessment (TRA) and existing controls as part RCSA framework and other relevant methodologies & best practices for achieving operational resilience.
• Participate in the review of BIA-based vendor risk as per the framework defined by Risk Management, as amended from time to time.
• Participate in all internal and external audits, attending meetings as required.
• Provide ongoing support to the Senior Manager of BCR on assorted tasks (including, but not limited to, payments and invoice management, budgeting and expense management).
• Successfully tackle ad-hoc assignments and small-scale projects as and when requested.
• Act as temporary back-up to Senior Manager of BCR and other BCR staff as and when required.

Reporting

• Support in the preparation and submission of responses to auditors, and the follow-up on any agreed actions through to their satisfactory closure in a timely manner.
• Facilitate and document the regular assessment of Bank-wide threats and risks with Risk Management and other key stakeholders.

Stakeholder Management

Internal Interactions

• Participate in various cross-functional committees/teams for multiple purposes to achieve optimal cooperation and to assume seamless quality service.
• Continuously challenge existing practices, propose and foster new ways of thinking and working in the organization, and actively share applicable best practices and knowledge with BCR colleagues and other key stakeholders.
• Coordinate with key stakeholders as required to conduct periodic tests / simulations.
• Act as a key point of contact with the vendor in relation to the International Crisis Command Centre and the local Recovery Sites.
• Facilitate and conduct awareness, coaching and informational sessions on BCR and related sub-topics for staff in various departments and roles as and when required.
• Monitor the regular testing / simulation of BC and IT DR plans by relevant business owners and support teams and measure the test/simulation result in line with the identified & approved business requirements.
• Work with key stakeholders to review and revise BC and IT DR plans as required based on the results of tests / simulations

External Representation

• Maintain and regularly review all contracts and service-level agreements signed with the vendor.
• Coordinate with the vendor (and other key stakeholders) as required to conduct periodic tests / simulations.

People Development

• Participate in the selection and development of staff.
• Evaluate performance and recommend developmental needs of the team.
• Review recommendations of subordinate staff and provide guidance in resolving complex or sensitive problems.
• Maintain and promote positive work culture and responsible for improving employee engagement level of the team.

Job Specifications:

Educational Qualification(s): Bachelor’s degree or equivalent in a related field

Certification(s): CBCI, CISM, BCCS

Desired Attributes: CISA, DRCE and MBCI

Experience: Minimum 6 years of relevant experience required- At least 3 years of experience within in Banks, a financial institutions or related fields

Language(s) known: English (Proficient) and Arabic (Proficient).