Business Continuity & Resilience Manager

Main Responsibilities

1. Governance & Business Continuity Framework

• Define, formalize, and maintain the Business Continuity Policy in alignment with Payment Services' strategic objectives, stakeholder expectations (in particular SaaS clients), and applicable standards/regulatory requirements.
• Establish the methodological framework for the continuity program (planning, roles/responsibilities, plan lifecycle, documentation, and review process).
• Implement effective governance (committees, key roles, validation/escalation processes).
• Maintain ISO 22301 certification and extend the BCMS framework to new PS perimeters.

2. Business Impact Analysis & Risk Assessment

• Lead and regularly update Business Impact Analyses (BIA) to identify critical processes, dependencies (human resources, IT, providers), and acceptable recovery times (RTO/RPO).
• Conduct Business Continuity Risk Assessments on internal/external threats that could disrupt operations.
• Identify risk mitigation measures and propose action plans.

3. Development & Maintenance of Continuity Plans

• Design, formalize, and keep updated:
• Business Continuity Plans (BCP)
• IT Disaster Recovery Plans (DRP)
• Crisis management procedures (emergency plans, crisis cells, etc.)
• Integrate critical providers/suppliers into the continuity strategy.
• Ensure alignment between business plans, IT plans, and contractual/SLA commitments.

4. Testing, Exercises & Validation

• Develop a multi-year continuity testing plan (failover tests, crisis simulations, recovery drills, documentation reviews, etc.).
• Lead test execution: define scenarios, coordinate with business/IT teams, supervise, evaluate, and report.
• Draft reports and lessons learned, identify gaps, and follow up on corrective actions.
• Report results to steering committees, top management, and/or regulatory authorities.

5. Crisis Coordination

• Contribute to activating crisis management procedures in the event of major incidents.
• Support the crisis unit (coordination, documentation, decision log, action follow-up).
• Ensure emergency contacts, escalation procedures, and crisis communication tools are up to date.
• Monitor incident resolution and ensure return to normal conditions as planned.

6. Client Relationship Management

• Ensure client requirements in terms of continuity (plans, service levels, recovery times) are addressed and respected.
• Lead discovery workshops with clients to capture and formalize non-functional continuity requirements.
• Document and track client requirements in coordination with project, business, and technical teams.
• Ensure integration of continuity requirements into projects (onboarding, evolutions) and validate before go-live.

7. Awareness, Training & Resilience Culture

• Develop and deliver awareness sessions on business continuity for employees.
• Train key stakeholders (plan owners, crisis team members, technical teams) on roles and responsibilities.
• Promote a culture of organizational resilience across the company.

8. Third-Party & External Dependency Management

• Ensure critical suppliers have adequate and tested continuity plans.
• Integrate continuity requirements into RFPs, contracts, and SLAs.
• Conduct or coordinate vendor continuity assessments.

9. Monitoring, Audit & Continuous Improvement

• Define and monitor KPIs/KRIs for the continuity program.
• Provide regular reporting to management and governance committees.
• Contribute to internal/external audits and regulatory inspections, and respond to compliance requests.
• Drive continuous improvement initiatives based on test results, incidents, and audit findings.
• Profile Sought
• Education: Master's degree (IT, telecoms, cybersecurity, or equivalent).
• Experience:
• Minimum 10 years of experience in business continuity management, ideally in a critical or highly regulated environment (e.g., payments, banking, IT services).
• Strong background in IT systems engineering (infrastructure, networks, cloud, cybersecurity).
• Technical Skills:
• Solid understanding of IT infrastructure, network architectures, virtualization, cloud environments (AWS, Azure, etc.), and backup systems.
• Ability to effectively challenge and collaborate with technical teams (Production, Network, Security, Cloud) when implementing DRP/BCP.
• Knowledge of high availability, disaster recovery, backup/restore, and resilient architectures.
• Familiarity with IT security and compliance frameworks (e.g., PCI DSS, ISO 27001, DORA, NIS2).
• Functional & Cross-Functional Skills:
• Strong knowledge of business continuity frameworks/standards: ISO 22301, ITIL, BCI.
• Proven ability to manage transversal projects involving multiple stakeholders (business, IT, security, compliance).
• Excellent written and verbal communication skills, ability to lead workshops and draft structured deliverables.

Personal Qualities:

• Rigor, organizational skills, and results-oriented mindset.
• Natural leadership and ability to engage diverse stakeholders.
• Analytical thinking and perspective.
• Reactivity and composure under crisis situations.
• Languages: Fluent French and professional English (written and spoken).