Job Title: Business Continuity Manager
Department: ITG CDF
About Business line/Function: ITG is a Group function established in 2019 within ISPL, with a presence in Mumbai and Chennai. We collaborate with various business lines across the Group to provide IT services.
Within IT Group, the Cybersecurity & Digital Fraud Department defines, steers and promotes the Group’s approach to IT risk management, cybersecurity, Business Continuity, Crisis Management and operational resilience across BNP Paribas entities.
· Defining the vision, strategy and methodological framework for IT risk management, cybersecurity and IT Continuity,
· Monitoring the security, resilience and continuity posture of the Group’s information systems,
· Ensuring the effective deployment of Group standards and requirements across operating entities.
Against a rapidly evolving cyber threat landscape and increasing regulatory expectations, strengthening cybersecurity maturity, IT risk management and operational resilience is a strategic priority for BNP Paribas.
The successful candidate will join the IT Group Cybersecurity & Digital Fraud department in India.
In this role, the Business Continuity Expert will contribute to the development of the India platform and ensure that core Business Continuity activities are consistently understood, implemented and monitored across Group entities, in alignment with the Group Business Continuity and Crisis Management framework.
Position Purpose: The Business Continuity Expert will play a key role in strengthening the Group’s Business Continuity, Crisis Management and Operational Resilience capabilities. The role combines expertise, governance, advisory support and continuous improvement to help entities implement robust continuity arrangements, meet regulatory expectations and enhance their ability to recover from disruptive events.
Responsibilities
Direct Responsibilities
· Business Continuity strategy and governance
o Develop and implement the enterprise-wide Business Continuity Management (BCM) strategy, framework, policies, standards, and procedures.
o Establish and maintain the Business Continuity Management System (BCMS) in alignment with BNPP group policy and applicable regulatory requirements.
o Define governance structures, roles, responsibilities, escalation mechanisms, and accountability for business continuity.
o Advise senior management on business resilience risks, continuity investments, preparedness, and improvement priorities.
o Establish and monitor key risk indicators (KRIs), key performance indicators (KPIs), and BCM maturity assessments.
o Lead the Business Continuity Steering Committee; coordinate cross functional inputs and obtain executive sign off for critical recovery objectives.
o Regularly maintain and update ITG and various other dashboards.
o Attend Committee meetings for update related to Business continuity and Crisis Management.
· Risk and Business Impact Assessment
o Lead enterprise-wide BIA exercises to identify critical business processes, dependencies, recovery requirements, and resource needs.
o Determine and validate Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), Maximum Tolerable Period of Disruption (MTPD), and minimum business continuity requirements.
o Conduct business continuity risk assessments covering people, processes, technology, facilities, suppliers, and external dependencies.
o Identify single points of failure and develop risk mitigation and resilience enhancement plans.
o Present significant continuity risks and remediation plans to executive management and relevant governance committees.
· Plan development and Maintenance
o Develop, review, and maintain Business Continuity Plans (BCPs), departmental continuity plans, crisis response plans, and emergency response procedures.
o Ensure continuity strategies address alternate work locations, remote working, workforce availability, critical suppliers, communication systems, and essential business resources.
o Coordinate with functions to align business recovery requirements with application, infrastructure, network, cloud, and data recovery capabilities.
o Validate recovery arrangements for critical business processes and ensure documented plans remain current and actionable.
o Establish procedures for business resumption, recovery validation, and return to normal operations.
· Crisis Management and Incident Response
o Develop and maintain the enterprise crisis management framework, crisis communication protocols, escalation procedures, and decision-making structures.
o Facilitate crisis management exercises covering cyber incidents, ransomware, data breaches, prolonged technology outages, facility disruptions, and third-party failures.
o Coordinate crisis response activities with executive leadership, IT, cybersecurity, communications, legal, compliance, human resources, and external stakeholders.
o Organize crisis simulations and tabletop exercises to assess organizational preparedness and decision-making effectiveness.
o Support crisis leadership teams during actual disruptions and coordinate post-incident reviews and corrective actions.
· Testing, Exercising and Continuous improvement
o Establish an annual BCM exercise and testing calendar covering business continuity plans, crisis management, disaster recovery dependencies, and critical third-party arrangements.
o Conduct tabletop exercises, walkthroughs, simulation exercises, and operational recovery tests.
o Document test results, identify gaps, assign corrective actions, and track remediation to closure.
o Assess the effectiveness of continuity strategies and validate achievement of approved recovery objectives.
o Drive continual improvement of the BCMS based on incidents, exercises, audits, risk assessments, and changing business requirements.
· Third-Party and Supply Chain Resilience
o Assess business continuity risks associated with critical vendors, outsourced operations, cloud service providers, and strategic business partners.
o Define continuity and recovery requirements for critical third parties and incorporate them into vendor risk management processes.
o Review vendor BCPs, disaster recovery capabilities, assurance reports, and resilience testing evidence.
o Develop contingency arrangements for critical supplier failure, concentration risk, and prolonged service disruptions.
· Regulatory and Audit Liaison
o Ensure compliance with applicable business continuity, operational resilience, information security, and industry-specific regulatory requirements.
o Coordinate internal audits, external audits, certification assessments, and regulatory examinations relating to BCM.
o Maintain BCM documentation, evidence repositories, risk registers, testing records, and management reports.
o Track audit findings, policy exceptions, and regulatory observations through remediation and closure.
· Stakeholder Management and Awareness
o Engage business leaders, process owners, technology teams, risk management, information security, and support functions to strengthen organizational resilience.
o Conduct BCM awareness sessions, role-based training, and crisis management workshops.
o Establish a network of departmental continuity coordinators and business recovery representatives.
o Provide regular management reporting on BCM performance, critical gaps, exercise outcomes, and resilience improvement initiatives.
· Co-ordination with the parent group
o Co-ordinate with ITG and PPS on Business Continuity and Crisis Management related topics. Take part in the activities, exercise being conducted by the ITG CAO and PPS team.
· Communication and Tooling
o Knowledge of Everbridge is required for internal communication
o Creating rules and running notification exercise when needed
o Use the tool for communication during the Crisis.
Contributing Responsibilities
Technical & Behavioral Competencies
· Experience in highly regulated sectors (e.g., banking, finance, insurance, energy, or critical infrastructure) is preferred.
· Strong autonomy, with the ability to improve methodologies, facilitate entity implementation, support team efficiency and anticipate stakeholder needs.
· Proven ability to operate effectively in large, complex and international organizations.
· Excellent written and verbal communication skills in English.
· Ability to present complex information clearly, concisely and confidently to both technical and non-technical stakeholders.
Specific Qualifications:
· Certified Business Continuity Professional (CBCP) or CBCI or ISO 22301 Lead Implementer/Lead Auditor (or equivalent).
· French language skills, including speaking, writing and reading, would be a strong advantage.
Skills Referential (Required knowledge, skills and abilities)
Transversal Skills:
· Ability to develop and adapt to a process
· Analytical Ability
· Ability to work in a team environment
· Ability to collaborate
Behavioral Skills:
· Ability to synthetize / simplify
· Ability to deliver / Results driven
· Communication skills - oral & written
· Respect for Diversity & Inclusion
Education Level: Bachelor’s degree in computer science, Information Technology or a related discipline, a master’s degree would be an advantage with minimum 15 years of professional experience, including at least 10 years in Business Continuity, Crisis Management, operational resilience or related domains.
Location: Bangalore/Chennai
About BNP Paribas Group:
BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.
About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.
Commitment to Diversity and Inclusion
At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.
