KCB Bank is hiring a Manager, Business Continuity Planning & Compliance to oversee disaster recovery strategies, conduct business impact analyses, and ensure regulatory compliance.

Responsibilities or duties

Technology Resilience & Recovery.

Mandate the Group-wide Technology BCM and Operational Resilience strategy, ensuring alignment with ISO 22301, global best practices, evolving regional regulatory mandates (e.g., CBK Prudential Guidelines) while integrating modern Cloud-Native resilience patterns, Automated DR Failover Orchestration, and Infrastructure as Code (IaC) for automated recovery.

Partner with Group Cybersecurity to design and test specialized “Cyber Recovery Playbooks” (e.g., Ransomware recovery, immutable backups) to defend against and rapidly recover from destructive cyber-attacks.

DR Failover Simulations Orchestration & Testing.

Direct and orchestrate multi-jurisdictional Disaster Recovery (DR) and Cyber Resilience failover simulations for the Group’s Core Banking and Tier-1 applications, rigorously validating strict Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).

Develop technology-related crisis management frameworks and facilitate IT DRP simulation exercises (Tabletop drills) for the Group Technology teams.

High-Availability (HA) & BIA.

Challenge Enterprise Architects and system owners on High Availability and redundancy designs; exercise authority to mandate the elimination of Single Points of Failure (SPOFs) across physical data centers and decentralized Multi-Cloud/Containerized architectures.

Lead Business Impact Analyses (BIA) and IT Threat/Vulnerability assessments to proactively align technology recovery strategies with business demands.

Third-Party Cloud Resilience & Supply Chain Governance.

Execute resilience audits and risk assessments of critical third-party technology vendors, SaaS/PaaS Cloud Service Providers (CSPs), and FinTech partners to prevent supply chain disruptions and mitigate systemic concentration risks.

Executive Reporting & Remediation Enforcement

Design high-impact Operational Resilience dashboards and present strategic BCM risk profiles and compliance postures to the Group Risk Management Committee and the Board.

Mandate and strictly track the closure of critical vulnerabilities, architectural gaps, and lessons learned identified during DR simulation exercises to their logical conclusion.

Qualifications or requirements

Minimum Position Qualification Requirements

Academic & Professional

Bachelor’s Degree Computer Science, Information Systems, Information Security or a related IT field RQ

Master’s degree in business or IT AA

Professional Qualifications

Business Continuity / Resilience CBCP (Certified Business Continuity Professional), AMBCI, MBCI, or ISO 22301 Lead Implementer / Auditor. RQ

Technology Governance & Security CISA, CISM, CISSP, CRISC, or ITIL v4 AA

Experience needed

Total Minimum No of Years’ Experience Required 5

Experience in IT operations, architecture, or assurance functions within the Financial Services industry. 5 RQ

Deep, practical knowledge of current business continuity planning techniques, disaster recovery, and performing complex risk and business impact analyses (BIA). 4 RQ

Demonstrated exposure to IT resilience practices, including Cloud-native recovery orchestration, Infrastructure as Code (IaC), Automated DR Failover Orchestration, and governing SaaS/PaaS resilience. 3 ES

Strong understanding of Core IT applications and experience in governing Third-Party/Vendor technology resilience. 3 ES

Proven track record of managing cross-functional technical teams during high-pressure crisis events or large-scale DR simulations.

• Mandate the Group-wide Technology BCM and Operational Resilience strategy, ensuring alignment with ISO 22301, global best practices, evolving regional regulatory mandates (e.g., CBK Prudential Guidelines) while integrating modern Cloud-Native resilience patterns, Automated DR Failover Orchestration, and Infrastructure as Code (IaC) for automated recovery.
• Partner with Group Cybersecurity to design and test specialized “Cyber Recovery Playbooks” (e.g., Ransomware recovery, immutable backups) to defend against and rapidly recover from destructive cyber-attacks.
• Direct and orchestrate multi-jurisdictional Disaster Recovery (DR) and Cyber Resilience failover simulations for the Group’s Core Banking and Tier-1 applications, rigorously validating strict Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
• Develop technology-related crisis management frameworks and facilitate IT DRP simulation exercises (Tabletop drills) for the Group Technology teams.
• Challenge Enterprise Architects and system owners on High Availability and redundancy designs; exercise authority to mandate the elimination of Single Points of Failure (SPOFs) across physical data centers and decentralized Multi-Cloud/Containerized architectures.
• Lead Business Impact Analyses (BIA) and IT Threat/Vulnerability assessments to proactively align technology recovery strategies with business demands.
• Execute resilience audits and risk assessments of critical third-party technology vendors, SaaS/PaaS Cloud Service Providers (CSPs), and FinTech partners to prevent supply chain disruptions and mitigate systemic concentration risks.
• Design high-impact Operational Resilience dashboards and present strategic BCM risk profiles and compliance postures to the Group Risk Management Committee and the Board.
• Mandate and strictly track the closure of critical vulnerabilities, architectural gaps, and lessons learned identified during DR simulation exercises to their logical conclusion.

• Business Continuity Planning
• Disaster Recovery
• Business Impact Analysis (BIA)
• IT Resilience
• Cloud-Native Recovery Orchestration
• Infrastructure as Code (IaC)
• Automated DR Failover Orchestration
• SaaS/PaaS Resilience Governance
• Third-Party/Vendor Technology Resilience Governance
• Crisis Management
• Risk Management
• Regulatory Compliance
• Cybersecurity Resilience
• Team Management

• Bachelor’s Degree in Computer Science, Information Systems, Information Security or a related IT field
• Master’s degree in business or IT
• CBCP (Certified Business Continuity Professional), AMBCI, MBCI, or ISO 22301 Lead Implementer / Auditor
• CISA, CISM, CISSP, CRISC, or ITIL v4