M-Pesa MGR Operational Resilience & BCM
Role Purpose
This poistion's main purpose is to lead the Vodacash Business Continuity and Operational Resilience capability, so that important business services such as payments, transfers, cash-in/cash-out and the agent network keep running, or recover within approved impact tolerances, when severe disruptions occur.
The role sets policies, coordinates and challenges first-line preparedness, and gives Management and the Board a clear, independent view of Vodacash’s resilience. In doing so, it protects customers, reputation and financial stability, and supports compliance with BCC and Group requirements.
Core Responsibilities
- Own and maintain the BCM and Operational Resilience policies and methodology.
- Coordinate Business Impact Analyses and review the adequacy of business continuity and disaster recovery plans owned by first-line teams.
- Identify important business services, map their end-to-end dependencies, and facilitate Board-approved impact tolerances.
- Plan and run continuity exercises and severe but plausible scenario tests, and track remediation closure.
- Assess critical third-party and intra-group dependencies, including exit and substitution arrangements.
- Support the crisis management team during major incidents and lead post-incident reviews.
- Promote resilience awareness and training across the business, while providing constructive challenge.
Key Knowledge
- BCM and operational resilience methods: BIA, recovery strategies, RTO/RPO, important business services, impact tolerances, severe but plausible scenario testing;
- Standards and regulations: BCC Instruction 36, ISO 22301 and ISO 22316, the BCBS Principles for Operational Resilience, and the Principles for the Sound Management of Operational Risk.
- Operational risk framework: RCSA, KRIs, loss and incident data, risk appetite.
Core Compentencies
- Analytical thinking: maps complex end-to-end dependencies and spots single points of failure.
- Facilitation: runs effective BIA workshops and tabletop exercises with senior participants.
- Communication: writes concise, decision-oriented reports for executives in French and English.
- Programme management: plans and delivers a multi-year resilience programme accross many stakeholders
Qualifications
- Degree in Business, IT, or a related field.
- At least 5 years' experience in business continuity, operational risk or technology risk, ideally in banking, mobile money or telecoms.
- ISO 22301 Lead Implementer certification is an advantage.
Key Performance Indicators
- 100% of critical processes covered by current BIA and approved BCP.
- 100% of important business services mapped with approved impact tolerances.
- Material remediation actions closed on time; resilience reporting delivered every quarter.