BCM Officer

THE ROLE When something goes wrong, the plan has to already exist, and it has to already have been tested. As BCM Officer in the Business Continuity Management and Resilience team, reporting to the Head of BCM and Resilience, you help build and run that plan. You work with business units to find what really matters, set how fast it must recover, write the plans, and then test them until they hold. When a real incident hits, you re in the room supporting the crisis team, keeping the log, and making sure the bank s critical services keep running. WHAT YOU LL DO Conduct and maintain business impact analyses (BIAs) with business units to identify critical products, services, and processes, and to set Maximum Tolerable Period of Disruption (MTPD), Recovery Time Objectives (RTO), Recovery Point Objectives (RPO), and minimum resource requirements Carry out business continuity risk assessments covering threats such as loss of site, technology, people, suppliers, and cyber incidents, and recommend mitigation measures Develop, review, and maintain business continuity plans (BCPs), recovery procedures, call trees, and work area recovery arrangements for all critical functions Work with IT to align disaster recovery plans (DRPs) and IT service continuity with business recovery requirements, and identify gaps between required and actual recovery capabilities Plan, coordinate, and run the annual testing and exercise programme, including tabletop exercises, call tree tests, alternate site and work area recovery tests, and DR failover/failback tests Document test and exercise results, record lessons learned, and track corrective actions to closure Support the crisis management framework, including crisis management team (CMT) structures, escalation and invocation criteria, crisis communication plans, and playbooks for scenarios such as cyber attacks, pandemics, and major outages Act as a coordinator during real incidents and crises: support the crisis management team, maintain incident logs and situation reports, and help with post incident reviews Assess the continuity arrangements of critical third parties and outsourced service providers, and make sure contracts and SLAs reflect recovery requirements Maintain BCM policies, standards, and procedures in line with ISO 22301, CBE business continuity and operational resilience requirements, and other applicable regulations Support internal and external audits, CBE inspections, and ISO 22301 certification activities by preparing evidence and tracking findings Manage BCM tools and the BCM platform, including mass notification systems, and keep plan and contact data up to date Run BCM awareness and training sessions for staff, plan owners, and crisis team members Prepare BCM status reports, KPIs, and dashboards for the Head of BCM and Resilience, management, and risk committees Preferred certifications BCI Certificate (CBCI) from the Business Continuity Institute DRI International certifications such as ABCP or CBCP ISO 22301 Lead Implementer or Lead Auditor ITIL Foundation or ISO/IEC 27001 Foundation (an advantage)

Desired Candidate Profile

Bachelor s degree in Business Administration, Risk Management, Computer Science, IT, or a related field 2 to 4 years of experience in business continuity management, operational resilience, or a related risk role, ideally in banking or financial services Hands-on experience conducting BIAs and risk assessments, and building and maintaining BCPs Practical experience planning and running BCP exercises and DR tests, and reporting on the results Experience supporting crisis management and incident response, including crisis communication Good knowledge of ISO 22301 and ISO 22313, and familiarity with ISO/TS 22317 (BIA), ISO 22361 (crisis management), and ISO/IEC 27031 (ICT readiness for business continuity) Familiarity with CBE regulations on business continuity, operational risk, and resilience, and with the Egypt Financial Cybersecurity Framework Understanding of IT infrastructure, data centres, backup and replication, and DR concepts Experience with BCM software and mass notification tools (e.g., Fusion Risk Management, Archer BCM, Castellan, Everbridge) is an advantage