Manager, Business Continuity Management (BCM)

ROLE OVERVIEW

This role is responsible to lead the implementation, maintenance and continual improvement of the Group's Business Continuity Management System (BCMS) in alignment with ISO 22301, regulatory requirements and organisational needs. You will serve as the Group's BCM subject matter expert, coordinating with Business Units, IT, Operations, BCM Coordinators and other stakeholders to strengthen organisational resilience and recovery readiness.

KEY RESPONSIBILITIES

BCM (Implementation & Governance)

• Drive BCM function across the Group, ensuring alignment with ISO 22301 requirements and industry best practices
• Develop, review and maintain BCM policies, frameworks and procedures.
• Lead the Business Impact Assessments (BIA) and Risk and Threat Assessments (RTA) exercise.
• Provide guidance and support to Business Units on BCM requirements, continuity strategies and recovery arrangements.
• Review and advise on Business Continuity–related contractual clauses and due diligence, ensuring commitments and BCM obligations are aligned with CTOS’s capabilities and client requirements.
• Monitor BCM performance, programme milestones and outstanding action plans, and provide regular updates to Management.

BCMS (Certification & Audits)

• Lead the Group's BCMS certification readiness and certification programme, including coordination of required documentation, implementation activities and audit preparation.
• Maintain certification status and ensure ongoing compliance with surveillance audits and recertification cycles.
• Track audit findings and non-conformities, coordinate corrective actions with relevant stakeholders, and monitor their timely closure.

Crisis Management

• Maintain Crisis Management Team (CMT) readiness by ensuring documentation, procedures, and protocols remain current and effective.
• Serve as a key coordinator between the CMT, BCM function, and other stakeholders to ensure alignment of crisis response, communication protocols, and escalation processes.
• Support senior management in post-incident reviews and action tracking, consolidating lessons learnt and tracking improvement actions.

Maintenance & Testing

• Lead the annual testing of Corporate BCP and Crisis Management Plan.
• Oversee and coordinate with other function owners to ensure annual testing programmes (Cyber Response, Incident Response, Emergency Response, IT Disaster Recovery) are executed effectively.
• Ensure lessons learnt from exercises and incidents are embedded into BCM and BCMS practices.

Awareness & Training

• Coordinate BCM awareness, training and competency programmes for BCM Coordinators and relevant employees.
• Promote a culture of resilience across the organization.

WHAT DOES IT TAKE TO BE SUCCESSFUL?

Qualifications

• Bachelor’s Degree in Business, Risk Management, IT or other related disciplines.
• Relevant professional certifications in Business Continuity is preferred (ie CBCP, CBCI, MBCI, ISO 22301 Lead Implementer)

Work Experience

• Minimum 7 years of relevant experience in Business Continuity Management.
• Proven experience in conducting or coordinating Business Impact Assessments (BIA), Risk and Threat Assessments (RTA), Business Continuity Plans (BCP) and BCM exercises.

Skills & Competencies

• Strong working knowledge of ISO 22301, BCMS implementation and certification requirements.
• Experience in ISO management systems, internal/external audits and certification exercises would be an advantage.
• Independent, proactive and able to work with minimal supervision, with strong problem-solving, analytical, communication and presentation skills.
• Ability to lead BCM initiatives, facilitate workshops and drive the timely completion of BCM action plans and improvement initiatives