Manager, Business Continuity at Equity Bank Kenya

Job Purpose:

The Manager, Business Continuity Management (BCM) is responsible for developing, implementing, and maintaining the bank’s Business Continuity and Disaster Recovery (BC/DR) framework to ensure the resilience of critical operations. This role ensures that the bank can effectively respond to disruptions, mitigate risks, and comply with regulatory requirements related to business continuity and crisis management.

Key Responsibilities

Business Continuity & Disaster Recovery Framework 

• Develop, implement, and maintain the bank’s Business Continuity Management (BCM) and Disaster Recovery (DR) programs.
• Establish business continuity policies, procedures, and guidelines aligned with industry standards (e.g., ISO 22301, CBK Guidelines).
• Ensure alignment between IT Disaster Recovery and Business Continuity Plans (BCPs).

Risk Assessment & Business Impact Analysis (BIA)

• Conduct Business Impact Analysis (BIA) to identify critical business functions and associated risks.
• Assess operational, financial, reputational, and regulatory risks related to business continuity.
• Develop risk mitigation strategies and response plans for identified threats.

Incident & Crisis Management

• Develop and maintain the bank’s Crisis Management Plan.
• Establish and coordinate crisis response teams to ensure effective incident management.
• Conduct periodic crisis simulation exercises to test readiness for disruptions.

Business Continuity Planning (BCP) & Testing

• Design and implement Business Continuity Plans (BCPs) for all key departments and branches.
• Coordinate BCP testing exercises, including tabletop drills, scenario-based simulations, and live failover testing.
• Ensure that IT systems, data centers, and essential applications have tested Disaster Recovery Plans (DRPs).

Regulatory Compliance & Audit Readiness

• Ensure compliance with Central Bank of Kenya (CBK) BCM guidelines, ISO 22301, and other global best practices.
• Act as the key liaison for internal and external audits on business continuity and operational resilience.
•        Address regulatory findings related to business continuity and ensure timely remediation.

Third-Party & Vendor Risk Management

• Assess business continuity risks associated with third-party service providers and critical vendors.
• Ensure that key vendors have robust business continuity and disaster recovery frameworks.

Training & Awareness

• Develop and conduct business continuity awareness programs for employees.
• Train department heads and crisis response teams on their roles in business continuity.

Reporting & Governance

• Provide regular BCM reports and Key Risk Indicators (KRIs) to senior management and the board.
• Lead the Business Continuity Steering Committee to drive resilience initiatives.

Qualifications

Qualifications And Experience

• Education: Bachelor’s degree in Business Administration, Risk Management, IT, Finance, or a related field. A Master’s degree is an added advantage.
• Certifications: Professional certifications such as CBCP (Certified Business Continuity Professional), ISO 22301 Lead Implementer, or DRII (Disaster Recovery Institute International) are highly preferred.
• Experience: Minimum of 5-7 years of experience in business continuity, operational risk management, or crisis management in the banking or financial services industry.
• Regulatory Knowledge: Strong understanding of CBK Business Continuity Guidelines, ISO 22301, Basel Accords, and IT Disaster Recovery best practices.

Key Competencies & Skills

• Business Continuity & Disaster Recovery Planning – Expertise in developing and maintaining BC/DR frameworks.
• Risk Assessment & Business Impact Analysis – Ability to identify critical business risks and implement mitigation strategies.
• Incident & Crisis Management – Strong knowledge of crisis response protocols and emergency preparedness.
• Regulatory Compliance & Audit Management – Experience in regulatory interactions, reporting, and compliance with BCM standards.
• Third-Party Risk Management – Ability to assess and monitor business continuity risks for external vendors and partners.