Business Resilience Lead

Job Title: Business Resilience Lead

Reports to: Head of Business Assurance

Department: Business Assurance

Location: London

Status: Permanent

DEPARTMENT DESCRIPTION

Business Assurance incorporates Internal Audit, Enterprise Risk Management, Investigations and

Business Resilience, covering all areas of the business. The department sits within the Corporate

area of the business, and provides a combination of advice, support, and assurance to help ensure

that key risks are suitably managed or mitigated across the business. The Head of Business

Assurance has a dual reporting line into the Finance Director and the Chair of the Audit; Risk

Committee (Non-Executive Director).

JOB PURPOSE:
The Business Resilience Lead role is a newly created position that will play a key role in ensuring

that the business-wide approach to resilience is fit for purpose, in support of delivering

against our public service remit and our strategy. We have launched a project to transform

how we address resilience; while some initial foundation work is already in progress, the in-depth

work required will take time. This is an exciting opportunity to add value to the business and shape

how we do things going forward. It will involve taking a fresh look at our resilience priorities, working

with senior management to set our resilience strategy, implementing a new framework covering

Business Continuity Management (BCM) and Incident/Crisis Management, ensuring alignment with

Disaster Recovery planning, implementing a robust testing and exercising programme. Driving

relevant to people in a wide variety of roles

KEY RESPONSIBILITIES
- Implement a comprehensive BCM framework, building on work completed to date, to ensure
that BCM is rolled out across all departments/functions and a consistent level of resilience and recovery capability is achieved across the business. This will include:

- Implementation of a comprehensive BCM framework to drive consistent execution, supported by tools and templates, with clearly defined roles and responsibilities.
- Implementing and maintaining our business resilience policy.
- Working with senior management to set our business resilience strategy and priorities according to what is important to the organisation and maintain this over time to take into account business/strategic priorities.
- Determining the nature of scenarios/incidents in scope for the BCM framework and developing consolidated BCM strategies against these.
- Working with business areas to develop end-to-end BCM plans.
- Defining the BCM exercising strategy and priorities and conducting exercises and scenario tests in line with this plan, to include operational teams, the Crisis Management Team (CMT) and the Board.
- Developing a network of Business Resilience Champions across the business and providing them (and other key stakeholders) with training appropriate to their resilience roles and responsibilities.
- Defining how the BCM capability will be maintained over time.
- Develop an incident and crisis management framework setting out how operational response plans interact with business continuity and crisis management plans, with a clear escalation pathway through Technology’s Major Incident Management and Disaster Recovery processes to the CMT. This will include:

- Consolidating existing elements of incident and crisis response processes.
- Defining response structures, including roles, responsibilities and escalation pathways.
- Identifying single points of failure within the current incident and crisis management structures and developing redundancy through identification and training of deputies.
- Updating business wide incident management and crisis management documentation, including procedures guides and status reporting templates. Ensure that documents owned within other teams (e.g. departmental BC Plans, Crisis Communications Plan, etc.) are maintained by their owners and include routes/thresholds to ensure the management of incidents at the appropriate level.
- Update and perform the role of Crisis Coordinator (within the CMT) to include:

- Providing guidance to the CMT members on CMT process, knowledge of departmental BC plans, and challenging the Chair and CMT assumptions as required.
- Overseeing Record Keepers to ensure effective information management.
- Ensuring that strategic priorities are set at the start of every CMT invocation, and that these are reinforced or updated at each CMT meeting.
- Ensuring adherence to the CMT Handbook and provide clarity to the CMT members on the rationale behind its contents when required.
- Ensure that an appropriate organisation-wide Disaster Recovery (DR) Programme is in place, bringing together Corporate and Broadcast Technology and other key recovery resources (e.g. Workspace), taking into account the output of Business Impact Assessments produced. This will include:

- Working with Technology to ensure that a common DR framework is in place, with a consisten