Head of BCIM Japan
Department Profile:
Business Continuity and Incident Management (BCIM) controls are designed to reduce the impact and severity of any disruption associated with the loss or unavailability of people, systems, premises and third parties or any other incident where there are customer, regulatory, reputational and/or financial impact.
The role of BCIM is to ensure these controls are effective through maintenance of the Business Continuity Management (BCM) and Major Incident Management (MIM) Programmes, continuous monitoring of the key controls and support the effective response to incidents when they occur. The BCIM function acts as a subject matter expert in advising stakeholders, across the business, through the planning lifecycle and exercising in addition to performing quality assurance reviews.
Role Purpose:
As Market Head of Business Continuity and Incident Management (BCIM), the role-holder is locally responsible for a range of activities across the respective disciplines. The job-holder must have considerable expertise and experience across this portfolio.
Working with the wider global and regional BCIM teams, and the local Head of Corporate Services, the job holder ensures risk controls are managed to agreed standards, represents the respective functions to senior and executive management in the location and engages with relevant regulators and other relevant agencies as required.
BCIM is part of the Deputy COO function, which forms part of the Bank’s Digital Business Services (DBS) structure reporting into the Group COO and locally into the Market COO. Budgetary responsibility aligns with Corporate Services, and line management responsibility for BCIM at market level aligns with the Head of Corporate Services.
Principal Accountabilities:
- Ensure BCM, MIM and BCM Lifecycle controls operate in line with established procedures and standards and in accordance with local law and regulations
- In partnership with the regional BCIM team, ensure local Business and Functions have a clear understanding of the appropriateness of the BCM Lifecycle controls and their effectiveness
- Execute required control monitoring, ensuring this is in line with standards agreed with the regional BCIM team
- Manage identified issues, ensuring that required mitigating activity is prioritised and actioned
- Identify and escalate changes in the local risk environment then agree appropriate actions with assistance from the regional BCIM team, market stakeholders and 2nd line risk stewards.
- Ensure local control reporting is produced in line with regional BCIM team, Chief Control Officer, regulatory and other stakeholder requirements
- Contribute to the completion of Risk and Control Assessments with assistance from the regional BCIM team, Chief Control Officer and market risk stewards if required
- Provide expert assistance and support to local Businesses, Functions and branches as they fulfil their analysis, planning and exercise obligations
- Provide local support on both the use and the content quality required for the Business Continuity Planning Tool (BCMNow) and Emergency Notification System (Everbridge)
- Review metrics and evaluate completeness of Business and Function obligations. Agree remediation activities if not in line with agreed expectations
- Manage the planning and execution of an effective, fit-for-purpose annual business continuity programme
- Oversee any local recovery site provision ensuring both availability and implementation effectiveness
- the Real Estate strategic planning process
- Support the effective function of the Business Resilience Steering Group (quarterly Resilience Management and Governance forum) by providing BCIM content, leadership, stakeholder engagement and management
- d exercises
- Perform threat monitoring and provide timely escalation and updates to MIG Chair, regional BCIM team and stakeholders
- Assist the MIG Chair on local MIG invocation. Facilitate the MIG invocation process and assist the Chair in the management of the meetings
- Execute Emergency Notifications to impacted stakeholder group as directed by MIG, COO and Regional BCIM team
- Follow Group standards relating to incident logging, management of the Emergency Notification Process including Systems (ENS) and the performance of post incident reviews
- Support the Important Business Service Owners (BSOs) by providing subject matter expertise and training on Business Continuity aspects within the Operational Resilience Program and ongoing support throughout the annual lifecycles
- Own the overall responsibility of BCIM led deliverables with the OpRES program and work jointly with the Centre of Excellence team in critical decision making
- Support the preparation, assessment and facilitation of tests along with 1 & 2 LoD SMEs to validate the severity & plausibility of the Scenarios
- Undertake analysis of the IBS mapping including interdependencies across people/processes/technology
- Provide SME guidance for the documentation of the IBS level BIAs / BCPs and Incident Management escalation structures through workshops
- Conduct deep dive reviews of Department level BIA / BCP contents with a view of aligning their impacts and responses to IBS Recovery Time Objectives and Impact Tolerances
- Attend test planning & project working groups and other meetings as required
- Consistently evaluate the project to identify areas for improvement and take action where necessary
- Escalate actual and potential issues to stakeholders in a timely manner
- Ensure compliance with applicable, local regulation and HSBC guidelines, making sure to employ the higher standard of controls. Maintain awareness of applicable regulations on BCIM and Operational Resilience
- Ensure compliance with applicable, local regulation and HSBC guidelines, making sure to employ the higher standard of controls
Engagement and participation with regional BCIM team
Engagement and participation with market CS, CAO and COO team
Lead by example, demonstrating integrity, accountability and drawing together disparate units into an effective team
Build and motivate a capable, engaged and challenged local team
Foster collaboration and exchange with other HSBC entities in market
Support multiple functions in Corporate Services where necessary (Being able to operate as a secondary contact / backup for Protective Security and Managing Third Party Risk as Third Party Engagement Manager). Therefore, the individual must take relevant trainings for those backup responsibilities
- Experience in risk or control management
- Subject matter expert and proven track record in managing a Business Continuity Programme
- Significant experience in managing Incidents, training senior executives and facilitating crisis exercises
- Deep understanding of globally leading and local regulatory requirements related to Business Continuity and Incident Management
- Professional certification in Business Continuity a significant advantage
- Ability to translate global, regional and local priorities to direct local activities
- Ability to make decisions including when under pressure and to tight deadlines
- Experience of working in highly regulated and complex international organisation
- Excellent written and verbal communication skills, with the ability to influence stakeholders at all levels
- Ability to balance multiple competing demands to find the best solutions
- Innovative thinking
- High ethical standards
- Fluency in Japanese and English a pre-requisite