Business Continuity Management Specialist

GENERAL RESPONSIBILITIES

The Specialist will also manage incident and crisis response, oversee third-party business continuity assessments, and support internal and BSP audits to ensure compliance with regulatory requirements, including those set by the Bangko Sentral ng Pilipinas (BSP).

MINIMUM REQUIREMENTS

Education: Bachelor's degree in Earth Science, Meteorology, Environmental Science, Disaster Risk Management, or related field.

Related Work Experience: At least 3 - 5 years experience supporting business continuity and incident management functions, risk management, operational resilience, or disaster risk reduction

Knowledge (knowledgeable in the following):

• Comprehensive knowledge of ISO 22301, BSP Circular No. 951, and BSP Circular No. 1203
• Broad knowledge of Incident/Crisis Management, Risk Management, or Disaster Risk Reduction process

Skills:

• Proficiency in Microsoft Excel (pivot tables, formulas, macros, etc.)
• Basic skills in Microsoft Power Platform tools for workflow development (Power BI, Power Automate)
• Detail-oriented with excellent analytical and problem-solving skills to assess risks and develop effective strategies.
• Strong communication skills to deliver training, facilitate exercises, and manage crisis communications.
• Flexibility to adjust work hours and shifts during incidents or emergencies to ensure continuous business continuity support.
• Extensive navigation skills in PAGASA, PHIVOLCS, and NDRRMC websites, weather forecasting tools, and alert messaging applications.

Preferred but not required (any of the following certifications):

• ISO 22301 Lead Implementer or Lead Auditor (ICOR)
• Business Continuity Institute's Certification
• Disaster Recovery Institute International (DRII) Certified Business Continuity Professional

A B C P/ C B C P

DUTIES AND RESPONSIBILITIES

The Business Continuity Specialist will perform the following duties, aligned with the BCM Lifecycle and additional responsibilities:

1. Business Impact Analysis (BIA) and Risk Assessment

• Conduct Business Impact Analyses to identify critical business functions, processes, and dependencies across the Palawan Group of Companies.
• Assess potential impacts of disruptions (financial, operational, reputational, and regulatory) on business operations.
• Perform Risk Assessments and regular BCM Risk Review to identify threats (e.g., natural hazards, cyberattacks, operational failures) and vulnerabilities specific to the organization’s operations in the financial services sector.
• Collaborate with Department Heads to prioritize critical processes and determine Recovery Objectives.
• Document findings and provide recommendations to mitigate identified risks.

1. Business Continuity Strategy Formulation

• Develop and recommend business continuity strategies to ensure the continuity of critical operations during disruptions.
• Coordinate with IT, Facilities, Branch Operations, and other departments to align strategies with organizational objectives and BSP regulatory requirements.
• Evaluate and recommend technology, resources, and processes to enhance resilience.

1. Business Continuity Plan Development

• Design, develop, and document Business Continuity Plans (BCPs) for all critical functions and processes, ensuring alignment with organizational goals and BSP guidelines.
• Create detailed response and recovery procedures for various disruptions, including severe but plausible scenarios.
• Ensure BCPs are clear, actionable, and accessible to relevant stakeholders.
• Incorporate crisis communication plans to manage internal and external stakeholder communications during disruptions.

1. Testing and Exercises

• Plan and execute BCP testing and exercises (e.g., tabletop exercises, simulations, and full-scale drills) to validate the effectiveness of continuity plans.
• Analyze test results, identify gaps, and recommend improvements to enhance plan effectiveness.
• Coordinate with cross-functional teams to ensure participation and readiness during testing.
• Document test outcomes and maintain records for audit purposes.

1. Plan Maintenance

• Regularly review and update business continuity-related plans and procedures to reflect changes in business processes, technology, regulatory requirements, or risk profiles.
• Ensure plans remain compliant with BSP Circulars (e.g., Circular No. 951, Circular No. 1203).
• Maintain version control and documentation of all BCM-related plans and procedures.
• Conduct periodic gap analyses to ensure plans remain relevant and effective.

1. Training and Awareness

• Develop and deliver BCM training programs to employees at all levels to foster a culture of resilience and preparedness.
• Create awareness campaigns to educate employees on their roles and responsibilities during disruptions.
• Train BCM and Crisis Management Teams on incident response protocols and communication strategies.
• Monitor and evaluate the effectiveness of training programs and adjust content as needed.

1. Incident/Crisis Management

• Support the Incident and Crisis Management Team by coordinating response efforts during disruptions.
• Serve as a point of contact for crisis communications and liaising with internal teams and stakeholders as needed.
• Document incident details, response actions, and lessons learned to improve future responses.
• Participate in post-incident reviews to identify root causes and implement corrective actions.

1. Third-Party Business Continuity Management and Assessment

• Assess the business continuity capabilities of third-party vendors, suppliers, and partners critical to Palawan Group of Companies’ operations.
• Conduct third-party BCM assessment to evaluate vendor resilience and compliance with BSP requirements.
• Provide recommendations to mitigate risks associated with third-party dependencies.

1. Internal Audit and BSP Audit Support

• Support internal audits of the BCM program to ensure compliance with organizational policies and industry standards.
• Prepare documentation and evidence for BSP audits, ensuring adherence to BSP Circulars and guidelines on operational resilience and business continuity.
• Collaborate with Risk Management, Compliance, and Internal Audit teams to address findings and implement corrective actions.
• Maintain accurate records of BCM activities, including BIAs, risk assessments, plans, and test results, for audit purposes.
• Assist in responding to BSP inquiries and regulatory reporting requirements related to BCM.