Business Continuity Specialist

ShopeePay; Metro Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

ShopeePay is seeking a BCM Officer to develop, implement, and maintain the company’s business continuity and crisis management capabilities. You will oversee disaster recovery, incident response, and resilience programs to ensure regulatory alignment and robust operational continuity across the organization.

You will identify critical operations, map dependencies, run BIAs, monitor KRIs, and drive testing and improvements while coordinating with risk and compliance teams.

Qualifications

• Bachelor's degree in business, management, IT, or related field required.
• Professional certification in BCM or risk management is an advantage.
• 3+ years in BCM, operational resilience, disaster recovery, or internal audit.
• Familiarity with BSP issuances on BCM, risk governance, and resilience.

Responsibilities

• Maintain the BCM and Operational Resilience Framework aligned with risk, information security, cyber resilience, and third-party risk.
• Identify critical operations and map dependencies; assess vulnerabilities and mitigation measures.
• Develop and maintain BCM, DR, IR, and crisis management plans; conduct BIAs and define recovery objectives.
• Assess risks from new products, systems, or changes; document residual risks and monitor actions.
• Investigate incidents and track corrective actions; close gaps and report findings to management.
• Develop KRIs, run resilience tests, and report results and plans to stakeholders.
• Ensure regulatory compliance and support audits; train employees and enhance BCM policies and procedures.

Skills

BCM knowledge

Risk management

Cyber resilience

Incident response

Education

Bachelor's degree in business, management, information technology, or related field

Job description

The Business Continuity Management (BCM) Officer is responsible for the development, implementation, and maintenance of the Company's business continuity, disaster recovery, incident response, and crisis management capabilities, and for the day-to-day administration of the Company's operational resilience framework, in compliance with BSP Circular No. 951 (Business Continuity Management Guidelines), BSP Circular No. 971 (Guidelines on Risk Governance), BSP Circular No. 1203 (Guidelines on Operational Resilience), and other related rules, regulations, and industry standards.

About the Role

The BCM Officer plays a crucial role in ensuring the operational resilience of the Company through effective business continuity management practices.

Responsibilities

• Maintain the Business Continuity Management (BCM) and Operational Resilience Framework, ensuring alignment with operational risk, information security, cyber resilience, third-party risk, and enterprise risk management.
• Identify critical operations and map key dependencies across people, processes, technology, facilities, information, and service providers; assess vulnerabilities and recommend mitigation measures.
• Develop and maintain business continuity, disaster recovery, incident response, and crisis management plans, including conducting Business Impact Analysis (BIA) and recommending recovery objectives and disruption tolerances.
• Assess continuity and resilience risks arising from new products, projects, systems, service providers, and material business changes; document residual risks and monitor mitigation actions.
• Investigate incidents and near misses affecting critical operations, identify root causes and control gaps, and track corrective and preventive actions through closure.
• Develop and monitor Key Risk Indicators (KRIs), conduct periodic resilience testing and exercises, evaluate recovery performance, and report results, risks, and action plans to management and oversight committees.
• Ensure compliance with regulatory requirements and industry standards, assess third-party recovery capabilities, support regulatory examinations and audits, conduct employee awareness training, and continuously enhance BCM policies, plans, and procedures.

Qualifications

• Bachelor's degree in business, management, industrial engineering, information technology, or a related field.
• Professional certification in business continuity, risk management, or audit (e.g., CBCP, CBCI, ISO 22301), is an advantage.
• At least three (3) years of relevant experience in business continuity management, operational resilience, disaster recovery, operational risk management, or internal audit, preferably with a bank, electronic money issuer, payment service provider, or other BSP supervised financial institution.
• Familiarity with, or with demonstrated working knowledge of relevant BSP issuances on business continuity, risk governance, and operational resilience, and of recognized standards such as ISO 22301.
• Demonstrated ability to conduct business impact analysis, dependency mapping