Cyber and Operational Resilience Specialist

About the role

You will be a key driver in strengthening the bank’s resilience against operational and cyber disruptions. Reporting to the Head of Operational Risk Management, you will collaborate with business units, supporting functions and IT teams to keep the Business Continuity Management (BCM) programme robust and aligned with regulatory expectations.

Key responsibilities

• Manage the full lifecycle of the bank’s BCM programme and ensure timely delivery of resilience testing for annual attestation.
• Review and guide Business Continuity Plans (BCP) and Disaster Recovery (DR) strategies with business and technology leaders.
• Coordinate periodic refresh of Business Impact Analyses (BIA) and unit‑level BCPs.
• Plan and execute annual BCP and DR tests, including tabletop exercises, call‑tree activations and recovery simulations.
• Provide subject‑matter expertise to technology initiatives supporting the BCP strategy.
• Integrate cyber and operational resilience metrics into the Enterprise Risk Management framework.
• Participate in industry crisis simulations organized by ABS, MAS or CSA.
• Ensure BCM framework and policies align with ISO 22301 and MAS regulations, and support audits and regulatory inspections.

Required profile

• Bachelor’s degree in Business Administration, IT, Cybersecurity, Risk Management or a related field.
• 3‑5 years of hands‑on experience in Business Continuity Management, Disaster Recovery or related risk functions.
• Familiarity with MAS regulatory expectations and industry best practices.

Required skills

• Business Continuity Management (BCM)
• Disaster Recovery (DR) planning and testing
• Business Impact Analysis (BIA)
• ISO 22301 standards
• Enterprise Risk Management (ERM) integration
• Cybersecurity risk awareness

What we offer

• Opportunity to shape resilience strategy for a fast‑growing regional digital bank.
• Collaborative environment with cross‑functional exposure.
• Professional development in cyber and operational risk domains.