Business Resilience Specialist

Role Purpose

The Business Resilience Specialist is responsible for executing and continuously enhancing the Bank's Business Resilience programme to ensure the resilience of critical business services, operational capabilities, and supporting dependencies.

The role serves as a Subject Matter Expert (SME) on Business Continuity Management (BCM), Operational Resilience, Crisis Management, Operational Continuity in Resolution (OCIR), Technology Resilience, and Third-Party Resilience. The incumbent will work closely with Business, Operations, Technology, Risk, Finance, Product, and external parties to strengthen the Bank's ability to withstand, respond to, recover from, and adapt to disruptions while meeting regulatory and business expectations.

Key Responsibilities

Business Continuity Management (BCM)

• Execute and maintain the Bank's BCM programme in accordance with regulatory requirements, internal standards, and industry best practices.
• Coordinate annual Business Impact Analysis (BIA) reviews for Critical Business Services (CBS) and Critical Business Functions (CBF), including dependency mapping, concentration risk assessments, and recovery objective reviews.
• Facilitate identification and assessment of people, process, technology, facilities, and third-party dependencies supporting critical services.
• Review and challenge Business Continuity Plans (BCPs) to ensure recovery strategies remain fit for purpose and aligned to business recovery objectives.
• Monitor BCM programme deliverables, remediation actions, and compliance obligations.
• Prepare BCM governance materials, management reporting, and attestation submissions.
• Maintain BCM standards, procedures, frameworks, and supporting documentation.

Operational Resilience

• Support the implementation and ongoing maturity of the Bank's Operational Resilience framework.
• Maintain the inventory of Critical Business Services and supporting dependency maps.
• Assess resilience vulnerabilities, concentration risks, and single points of failure across critical services.
• Facilitate severe-but-plausible scenario development, resilience assessments, and scenario testing exercises.
• Support resilience metrics, dashboards, and reporting for management and risk committees.
• Partner with business and technology stakeholders to ensure resilience considerations are incorporated into strategic initiatives and change programmes.

Operational Continuity in Resolution (OCIR)

• Support the Bank's Operational Continuity in Resolution (OCIR) framework and annual review processes.
• Coordinate Group OCIR submissions and support regulatory reporting requirements, including MAS 654 submissions.
• Maintain documentation relating to Critical Economic Functions (CEFs), critical shared services, and operational dependencies required to support resolution planning.
• Collaborate with Finance, Product, Strategy, Risk, and senior management stakeholders during OCIR reviews and submissions.

Crisis Management

• Maintain and enhance the Crisis Management Framework, supporting procedures, crisis playbooks, and crisis runbooks.
• Coordinate Crisis Management Team (CMT) exercises, tabletop simulations, and call-tree testing activities.
• Support crisis activation, coordination, and stakeholder communications during major disruptions.
• Drive lessons learnt reviews following incidents, exercises, and crisis events.
• Consolidate resilience and incident management processes across business and technology teams to strengthen enterprise crisis response capability.

Technology and Third-Party Resilience

• Partner with Technology teams to assess resilience of critical systems, technology platforms, disaster recovery capabilities, and service recovery arrangements.
• Review system recovery objectives, resilience gaps, and technology dependency assessments.
• Support Critical Business Service change management reviews involving new systems, applications, or technology changes.
• Assess resilience risks arising from outsourcing arrangements and critical third-party service providers.
• Review and challenge Third-Party Continuity Plans (TPCPs) and contingency arrangements for both technology and non-technology vendors.
• Collaborate with Vendor Management and Technology Risk teams to strengthen third-party resilience oversight.

Exercising, Testing and Assurance

• Develop and coordinate annual BCM testing and exercising programmes.
• Facilitate desktop walkthroughs, BCP exercises, end-to-end recovery testing, crisis simulations, and call-tree exercises.
• Maintain the Bank's resilience scenario library and testing methodologies.
• Prepare post-exercise reports, lessons learnt documentation, and remediation tracking.
• Monitor closure of resilience-related findings, actions, and improvement opportunities.

Governance, Reporting and Stakeholder Management

• Serve as the primary advisor and SME on business resilience matters across the Bank.
• Prepare reports and updates for risk forums, governance committees, and senior management.
• Support policy and standard reviews relating to BCM, operational resilience, crisis management, and third-party resilience.
• Coordinate regulatory reviews, audits, independent assessments, and assurance activities.
• Promote resilience awareness and conduct training sessions for Business Continuity Coordinators, business stakeholders, and employees.
• Foster strong working relationships across Business, Technology, Risk, Operations, and external partners to strengthen organisational resilience outcomes.

Qualifications & Experience

• Bachelor's degree in Business, Risk Management, Finance, Information Technology, Engineering, or a related discipline.
• Extensive years of experience in Business Continuity Management, Operational Resilience, Technology Resilience, Recovery & Resolution Planning, Operational Risk, or related disciplines within financial services.
• Strong understanding of Critical Business Services, Business Impact Analysis, recovery strategies, continuity planning, and resilience testing.
• Experience working with Technology, Operations, Risk, and Third-Party Risk Management functions.
• Experience facilitating workshops, resilience exercises, crisis simulations, and stakeholder engagements..
• Experience within banking, digital banking, fintech, or other highly regulated financial institutions.
• Knowledge of MAS BCM Guidelines, MAS Operational Resilience requirements, MAS Technology Risk Management Guidelines, Outsourcing Guidelines, and Recovery & Resolution Planning expectations.
• Professional certifications such as CBCI, DRI, ISO 22301 Lead Implementer/Auditor or equivalent.
• Experience supporting regulatory submissions, OCIR programmes, Critical Economic Function assessments, or enterprise resilience transformation initiatives.

Success Measures

The successful candidate will:

• Deliver the annual BCM programme and testing roadmap on time.
• Maintain accurate and current Critical Business Service inventories, BIAs, BCPs, and dependency mappings.
• Ensure effective crisis readiness through regular exercising and testing.
• Strengthen resilience oversight of critical technology services and third-party providers.
• Coordinate successful OCIR and regulatory submissions.
• Drive continuous improvement of the Bank's operational resilience capability and resilience culture.