Risk and Business Continuity Manager

Job Description

Role: Manager Risk and Business Continuity

Role Purpose

To drive, implement, and sustain the organization-wide Business Continuity Program by ensuring end-to-end ownership of BCP lifecycle activities, stakeholder alignment, and integration with ERM, with minimal supervision.

Key Responsibilities

1. BCP Program Management

• Own and manage the end-to-end BCP lifecycle (BIA, Risk Assessment, Strategy, Plan development, Testing, Auditing, Improvements)
• Ensure all business units/functions maintain updated and audit-ready BCPs
• Drive standardization of templates, frameworks, and governance

2. Business Impact Analysis (BIA) & Risk Integration

• Conduct and periodically update BIAs across functions and sites
• Identify critical processes, dependencies, and recovery priorities
• Align BCP risks with ERM framework and risk registers

3. Crisis & Incident Readiness

• Support activation of BCP and Crisis Management Teams (CMT)
• Ensure communication protocols, escalation matrices, and recovery procedures are in place
• Coordinate during incidents as BCP focal point

4. Testing & Exercising

• Plan and execute BCP drills, tabletop exercises, and simulations
• Document outcomes, capture gaps, and track closure
• Ensure coverage across critical scenarios (e.g., fire, IT outage, utility failure)

5. Stakeholder Coordination (Core Expectation)

• Act as single point of coordination across Business, HR, IT, Facilities, EHS, and Corporate Communications
• Drive regular reviews with BCP coordinators / department heads
• Ensure alignment of backup sites, dependencies, and recovery strategies

6. Governance, Compliance & Internal Audit

• Ensure compliance with internal policies, regulatory requirements, and client expectations
• Maintain documentation, evidence, and reporting dashboards
• Ensure compliance with BCP policy, regulatory, and client requirements
• Prepare for and support internal / external audits and third party assessments (ISO, client, regulatory)
• Conduct periodic internal BCP reviews / health checks:
• Track and close audit observations and non-conformities
• Provide BCP metrics and dashboards for management reporting

7. Awareness & Capability Building

• Drive BCP awareness programs and training sessions
• Build BCP ownership within functions
• Promote a resilient culture across the organization

Key Skills & Competencies

• Strong ownership mindset and ability to work independently
• Excellent stakeholder management skills
• Structured thinking in risk, controls, continuity, and crisis scenarios
• Strong communication and coordination ability
• Analytical mindset for risk assessment and prioritization
• Knowledge of risk management and internal controls

Preferred Experience

• 58 years in BCP, Disaster recovery (preferably in Pharma industry / manufacturing)
• Candidate should be ISO 22301 certified professional (Lead implementer or Lead auditor)
• Exposure to ISO 22301 / ERM frameworks (Mandatory)
• Exposure to GxP environments, lab operations, manufacturing, or regulated environments will be an advantage