Business Resilience Operational Risk Officer

Be #InGoodHands with Metrobank!

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach!

Position Title: Business Resilience Risk Officer

Job Summary:

• Assists the Department Head in the execution of Business Continuity and Operational Resilience strategies that enhance preparedness and response capabilities minimizing or eliminating risks by ensuring continued operations during business disruptions. Aiming to cultivate a proactive culture of risk awareness and collaboration, ultimately enhancing the organization’s ability to withstand and recover from unexpected challenges. Success in this role will be measured by achieving the following key outcomes:

1. Business Continuity Planning and Strategy Development: Ensures that all Business Units have up-to-date Business Continuity Plan document and are compliant to BCP deliverables (Business Impact Analysis (BIA), Business Continuity Plan (BCP), Call Tree, BCP testing, Recovery Site Visitations, etc.,).
2. Training and Awareness: Supports the execution or implementation of a comprehensive training program that ensures employees are familiar with business continuity procedures and protocols every year.
3. BCP Testing and Validation: Provides support in conducting BCP testings based on approved EW BCP testing strategy at least once a year to ensure effectiveness, with a target of identifying and addressing all the identified gaps before the next testing.
4. Stakeholder Engagement: Establishes regular communication with key stakeholders to ensure alignment on business continuity strategies and protocols achieving a satisfaction rate in stakeholder feedback surveys.
5. Incident Response and Management: Ensures timely reporting to stakeholders including Senior Management during actual incidents. Coordinate
6. Compliance Rate: Achieve and maintain a minimum 95% compliance with internal business continuity plans and industry standards.

Role Exposure:

1. Business Continuity Planning and Strategy Development:

• Review and enhance the Business Continuity Program and Operational Resilience Framework in alignment with industry best practices and standards.
• Develop and implement effective BCP tools and templates to support the creation of business continuity strategies and procedures.
• Conduct assessments by gathering and analyzing data, collaborating with subject matter experts to identify threats and vulnerabilities, and ensure plans are regularly updated to reflect changes in the business environment.

2. Training and Awareness Programs:

• Design and deliver business continuity training programs, awareness campaigns, and interactive sessions (e.g., workshops, walkthroughs, orientations) to foster a culture of preparedness and resilience.
• Integrate and monitor BCP e-learning modules and mandatory compliance training, ensuring consistent tracking and employee engagement.

3. BCP Testing and Validation:

• Plan, conduct, and document BCP simulation exercises and drills to test response capabilities, with results reported to relevant committees (e.g., EMCOM, ROC).

• Analyze outcomes of BCP testing, identify gaps or weaknesses, and coordinate with stakeholders to implement improvements.
• Collaborate with SMEs and business units to support the development and execution of both BCP and non-BCP related activities and testing initiatives.

4. Stakeholder Engagement and Communication:

• Facilitate regular stakeholder engagements, including meetings and coordination with business units, to support BCP documentation and review of continuity efforts and deliverables.

• Disseminate BCP advisories and updates, including relevant newsfeeds, to inform stakeholders and senior management (e.g., EMCOM) as needed.
• Liaise across bank units on business continuity and resilience-related processes, and provide assistance in non-BCP related meetings upon stakeholder request.

5. Incident Response and Management:

• Provide Senior Management (EMCOM, etc.) with reports and information, especially during actual incidences/disasters for their information or appropriate action.
• Assist in the dissemination of necessary information to stakeholders for awareness, guidance and decision making during actual incidences or disasters.
• Maintain, monitor and handle Risk Incident Reports in the ORMS (Damage to Physical Assets (DPA) and Employee Practices and Workplace Safety (EPWS) related RIRs)

6. Continuous Improvement and Reporting:

• Review, analyze and update business continuity tools and initiatives (Disaster Risk Assessment (DRA), Institutional Business Impact Analysis (Insti.BIA), Institutional Business Continuity Plans (Insti. BCPlans/playbooks, etc.,)).
• Prepare, develop and present reports to senior management (ROC, EMCOM, etc.,) on the status of business continuity efforts/activities, reportable incidents and other report worth highlighting.
• Identify emerging trends and best practices to enhance the organization’s resilience.

7. Regulatory Compliance:

• Monitors and ensures Business units are compliant with the Bank’s Business Continuity deliverables.

8. Additional Responsibilities:

• Perform other related duties as assigned to support the overall success of the Group and Bank.
• Provide assistance to support to Business units on various activities not related to Business Continuity.
• Support and Communication Coordination for IT Disaster Recovery Planning (DRP)

Qualifications:

• Bachelor’s degree
• BCP certifications is a plus
• Minimum of ten (3-5) years of broad experience in Business Continuity Planning (experienced in conducting Risk Assessment, Business Impact Analysis and BCP testings)
• Must be knowledgeable in ISO 22301 (Business Continuity Management System), BSP Cir. 951 Guidelines on Business Continuity Management and BSP Cir. 1203 Guidelines on Operational Resilience

Other Details:

Rank: Junior Officer

Unit: Risk Management Group / Business Resilience Risk Management Division / Business Continuity Department
Location: Metrobank Center, BGC, Taguig City