Head Of Business Continuity & Incident Management (GCB4)

Business Continuity and Incident Management (BCIM) controls are designed to reduce the impact and severity of any disruption associated with the loss or unavailability of people, systems, premises and third parties or any other incident where there are customer, regulatory, reputational and/or financial impact.
The role of BCIM is to ensure these controls are effective through maintenance of the Business Continuity Management (BCM) and Major Incident Management (MIM) Programmes, continuous monitoring of the key controls and support the effective response to incidents when they occur. The BCIM function acts as a subject matter expert in advising stakeholders, across the business, through the planning lifecycle and exercising in addition to performing quality assurance reviews.
In this role, you will:
Control Ownership
• Ensure BCM, MIM and BCM Lifecycle controls operate in line with established procedures and standards and in accordance with local law and regulations
• In partnership with the regional BCIM team, ensure local Business and Functions have a clear understanding of the appropriateness of the BCM Lifecycle controls and their effectiveness
• Execute required control monitoring, ensuring this is in line with standards agreed with the regional BCIM team
• Manage identified issues, ensuring that required mitigating activity is prioritised and actioned
• Identify and escalate changes in the local risk environment then agree appropriate actions with assistance from the regional BCIM team, country stakeholders and 2nd line risk stewards.
• Ensure local control reporting is produced in line with regional BCIM team, Chief Control Officer, regulatory and other stakeholder requirements
• Contribute to the completion of Risk and Control Assessments with assistance from the regional BCIM team, Chief Control Officer and country risk stewards if required
Business Continuity
• Provide expert assistance and support to local Businesses, Functions and branches as they fulfil their analysis, planning and exercise obligations
• Provide local support on both the use and the content quality required for the Business Continuity Planning Tool (Global Business Resiliency Tool (GBRT)) and Emergency Notification System (Everbridge)
• Review metrics and evaluate completeness of Business and Function obligations. Agree remediation activities if not in line with agreed expectations
• Manage the planning and execution of an effective, fit-for-purpose annual business continuity programme
• Oversee any local recovery site provision ensuring both availability and implementation effectiveness
• Support Real Estate planning by coordinating business recovery needs and ensure these are included in the Real Estate strategic planning process
• Support the effective function of the Business Resilience Steering Group (quarterly Resilience Management and Governance forum) by providing BCIM content, leadership, stakeholder engagement and management
Major Incident Management
• Ensure the mandated Major Incident Management (MIM) controls are in place and so enable an effective country Major Incident Group (MIG) response capability (including the preparation and facilitation of MIG member training and exercises
• Perform threat monitoring and provide timely escalation and updates to MIG Chair, regional BCIM team and stakeholders
• Assist the MIG Chair on local MIG invocation. Facilitate the MIG invocation process and assist the Chair in the management of the meetings
• Execute Emergency Notifications to impacted stakeholder group as directed by MIG, COO and Regional BCIM team
• Follow Group standards relating to incident logging, management of the Emergency Notification Process [including Systems] (ENS) and the performance of post incident reviews
Regulatory
• Ensure compliance with applicable, local regulation and HSBC guidelines, making sure to employ the higher standard of controls.