Business Continuity Manager

Business Continuity & Resilience Manager

Key Skills:

Location:

Experience:

Work Model:

Budget:

Domain:

About the Role

The Business Continuity & Resilience Manager is responsible for implementing, maintaining, and continuously improving products information security and business continuity program. The role requires solid experience in information security and business continuity management, with in-depth knowledge of standards and best practices such as ISO 27001 and ISO 22301.

Main Responsibilities

1. Governance & Business Continuity Framework

• Define, formalize, and maintain the Business Continuity Policy in alignment with Payment Services’ strategic objectives, stakeholder expectations (in particular SaaS clients), and applicable standards/regulatory requirements.
• Establish the methodological framework for the continuity program (planning, roles/responsibilities, plan lifecycle, documentation, and review process).
• Implement effective governance (committees, key roles, validation/escalation processes).
• Maintain ISO 22301 certification and extend the BCMS framework to new PS perimeters.

2. Business Impact Analysis & Risk Assessment

• Lead and regularly update Business Impact Analyses (BIA) to identify critical processes, dependencies (human resources, IT, providers), and acceptable recovery times (RTO/RPO).
• Conduct Business Continuity Risk Assessments on internal/external threats that could disrupt operations.
• Identify risk mitigation measures and propose action plans.

3. Development & Maintenance of Continuity Plans

• Design, formalize, and keep updated:
• Business Continuity Plans (BCP)
• IT Disaster Recovery Plans (DRP)
• Crisis management procedures (emergency plans, crisis cells, etc.)
• Integrate critical providers/suppliers into the continuity strategy.
• Ensure alignment between business plans, IT plans, and contractual/SLA commitments.

4. Testing, Exercises & Validation

• Develop a multi-year continuity testing plan (failover tests, crisis simulations, recovery drills, documentation reviews, etc.).
• Lead test execution: define scenarios, coordinate with business/IT teams, supervise, evaluate, and report.
• Draft reports and lessons learned, identify gaps, and follow up on corrective actions.
• Report results to steering committees, top management, and/or regulatory authorities.

5. Crisis Coordination

• Contribute to activating crisis management procedures in the event of major incidents.
• Support the crisis unit (coordination, documentation, decision log, action follow-up).
• Ensure emergency contacts, escalation procedures, and crisis communication tools are up to date.
• Monitor incident resolution and ensure return to normal conditions as planned.

6. Client Relationship Management

• Ensure client requirements in terms of continuity (plans, service levels, recovery times) are addressed and respected.
• Lead discovery workshops with clients to capture and formalize non-functional continuity requirements.
• Document and track client requirements in coordination with project, business, and technical teams.
• Ensure integration of continuity requirements into projects (onboarding, evolutions) and validate before go-live.

7. Awareness, Training & Resilience Culture

• Develop and deliver awareness sessions on business continuity for employees.
• Train key stakeholders (plan owners, crisis team members, technical teams) on roles and responsibilities.
• Promote a culture of organizational resilience across the company.

8. Third-Party & External Dependency Management

• Ensure critical suppliers have adequate and tested continuity plans.
• Integrate continuity requirements into RFPs, contracts, and SLAs.
• Conduct or coordinate vendor continuity assessments.

9. Monitoring, Audit & Continuous Improvement

• Define and monitor KPIs/KRIs for the continuity program.
• Provide regular reporting to management and governance committees.
• Contribute to internal/external audits and regulatory inspections and respond to compliance requests.
• Drive continuous improvement initiatives based on test results, incidents, and audit findings.

Profile Sought

Education

Experience

• Minimum 10 years of experience in business continuity management, ideally in a critical or highly regulated environment (e.g., payments, banking, IT services).
• Strong background in IT systems engineering (infrastructure, networks, cloud, cybersecurity).

Technical Skills:

• Solid understanding of IT infrastructure, network architectures, virtualization, cloud environments (AWS, Azure, etc.), and backup systems.
• Ability to effectively challenge and collaborate with technical teams (Production, Network, Security, Cloud) when implementing DRP/BCP.
• Knowledge of high availability, disaster recovery, backup/restore, and resilient architectures.
• Familiarity with IT security and compliance frameworks (e.g., PCI DSS, ISO 27001, DORA, NIS2).

Functional & Cross-Functional Skills:

• Strong knowledge of business continuity frameworks/standards: ISO 22301, ITIL, BCI.
• Proven ability to manage transversal projects involving multiple stakeholders (business, IT, security, compliance).
• Excellent written and verbal communication skills, ability to lead workshops and draft structured deliverables.

Personal Qualities:

• Rigor, organizational skills, and results-oriented mindset.
• Natural leadership and ability to engage diverse stakeholders.
• Analytical thinking and perspective.
• Reactivity and composure under crisis situations.