Implementation and assessment of the Business Continuity Management and Disaster Recovery Management framework, ISO 22301 implementation and Certification
Role & responsibilities
- Experience in managing implementation of ISO 22301 certification programmes
- Extensive experience of the BCP framework components such as Business Resiliency Planning, Crisis Management Planning, Incident Response Planning, Disaster Recovery Planning, Plan Exercising/ Testing, BIAs etc.
- Strong understanding of the planning, development, program execution, maintenance and testing of Enterprise Business Continuity, Disaster Recovery, and Crisis/Incident Management programs
- Hands on experience in implementing and assessing business resiliency program for organization of various sizes and complexity.
- Should be able to support BC/ DR audit and examination activities including development and maintenance of policies, procedures and standards that are aligned with best practices (standards, frameworks) such as ISO 22301, NIST
- Should be able to understand the Enterprise Risk Management methodologies and map it to the Business Resiliency Program
- Support the identification of Business Continuity related risks (internal / external), the assessment of their likelihood, as well as potential impacts and risk mitigation plans.
- Conduct Business Impact Assessment for various business functions
- Support internal reporting and tracking of business continuity related issues and remediation activities.
- Design, coordinate and execute BCP/DR annual test exercises for critical business processes and produce test reports including lessons learned.
- Develop recovery priorities, timelines, and strategy for proper sequence of recovery components
- Assist Crisis Management / Incident Management teams during service disruption events and contribute to process improvement initiatives.
- Should understand complete assessment lifecycle from assessment scoping to project deliverables
- Collaboration with the different stakeholders on the complex assessment issues to develop possible recommendations
- Monitor progress, manage risk, and verify key stakeholders are kept informed about progress and expected outcomes
- Presents findings and proposes recommendations that deal with root cause of issues and impact to the organization
- Manages the approved budget and resources for the assigned audit; assigns and reviews the work done by all team members
- Coaches team members and colleagues in the best use of company & teams methodologies and tools
- Educate team members in the correct implementation of BC & DR processes, standards and impart training to ensure recoverability of business processes and supporting services across business functions.
- Demonstrates excellent people management capabilities and is able to think out of the box
- Excellent communication skills and the ability to break down and explain complex data security problems
- Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels
Education:
- Minimum Qualification: BE/ BTech
- Postgraduates in any stream would be preferred (not mandatory)
- Prior Big 4 experience would be an added advantage
- Relevant experience in Business Continuity and Disaster Recovery for varied industry segments preferred
- Excellent communication skills - both written and oral
Certifications:
- ISO 22301 LI/ LA
- CRISC/ CISA/CISM/ MBCP/ CBCP will be added advantage