Specialist: Operations Risk and BCM

MAIN PURPOSE To implement and maintain the operations risk management & BCP frameworks which assist ADC Operations Office manage risk. Manage and coordinate risks in the Operations, Service Assurance & IT environment. Responsible for implementing a risk methodology, framework and systematic process of managing identified risks. Responsible for ensuring that BCM (Business Continuity Management) is in place and drive the sessions for planning, implementing, and maintaining the BCM strategies. Ensure and maintain a comprehensive business continuity and disaster recovery plan specifically tailored to the data center's unique needs & that the BCP aligns with industry standards and best practices. This role is vital in safeguarding critical infrastructure, data, applications, and services in the event of disruptions, disasters, or unforeseen incidents. The role will be an integral part of all ISO audits to present and show the effectiveness of the controls implemented for the risks identified. ROLE RESPONSIBILITIES Operations Risk Assessment Oversight of functional risks validated and assessed by the Global Operations & Operations Engineering, Service Assurance & IT teams. Perform Operations Risk Assessment (including external and internal factors) and identify potential risks affecting Global Operations & Operations Engineering, Service Assurance & IT. Ensure that Strategic Risks are identified and aligned with the Operations Strategy. Operations Risk Management Identify and coordinate resolution of identified risks and ensure risks are reported by category, severity, importance, impact & priority. Assist and provide guidance to all risk owners in the Operation, Service Assurance & IT environments ensuring risks are identified and logged. Work with the functional heads in Operations, Service Assurance & IT to identify controls to reduce the likelihood of a risk occurring. This work will form a subset of controls against Q&C test compliance. Support all internal and external requirements in all relevant ISO certifications and that all prescribed internal controls are being adhered to. Keep abreast of international risks in associated or equivalent mission critical environments and ensure that mitigations plans are in place to address exposure. Together with management teams, quantify (expected and extreme impacts) and design appropriate mitigating factors or remedial action plans in its contractual dealings with third parties in all the relevant business cycles including purchase of capital and revenue items for business use. Ensure that all risk raised by ADC MEP, Security & other providers are synced with internal risk registers. Compliance Implement and maintain the compliance framework (framework encompass the overall compliance framework (policy, manual, relevant templates etc.) and related processes) in order to identify, assess, monitor and report all material compliance risks. Guide business on compliance matters to enable them to implement policies and procedures that are compliant with legislation. Conduct compliance reviews and draft the quarterly Compliance Report to Audit and Risk Committee. Monitor that all contracts are loaded onto the documentation management system and kept updated. Ensure Operations, Service Assurance & IT documents (SOP, MOP, EOP, Processes & procedures) are relevant and updated. Track contractual compliance in respect of all customer / supplier deliverables and provide monthly obligations status report. Operations Risk Reporting Review risks captured through validation and ensure the Risk Rating, wording, classification, control documented, and evidence updated is correct and adequate. Inform and align with Operations Heads around the risks within their area and agree controls. Collate Information from the team and prepare the monthly Executive COO risk pack and ensure risk dashboard updated. Prepare weekly, bi-weekly, monthly and quarterly risk report for use for all Executive Management Committees. Provides an overview of the risks faced by Operations together with recommended actions where appropriate. Develop weekly and, where appropriate, daily risk reports for each function that provides functional heads with the quantitative measures identified with respect to risk exposure and control compliance. BCM (Business Continuity Management) Resource Management: Identify and allocate resources required for business continuity, such as backup facilities, equipment, and personnel. Testing and Drills: Plan and execute regular testing and drills to validate the effectiveness of the BCP and disaster recovery procedures. Incident Response: Develop and maintain an incident response plan for the data center to ensure a coordinated and effective response to disruptions or disasters. Communication and Coordination: Establish communication protocols with internal and external stakeholders, including data centre staff, management, and third-party service providers and coordinate with relevant authorities and agencies as necessary. Documentation: Maintain detailed documentation of the BCP, incident response procedures, recovery plans, and post-incident evaluations. Compliance and Audits: Ensure that the data centre's business continuity program complies with relevant industry standards, regulations, and audit requirements. Training and Awareness: Conduct training and awareness programs for data centre staff to ensure they are well-prepared for disaster recovery scenarios. Continuous Improvement: Stay informed about industry trends, emerging threats, and new technologies to enhance the data centre's business continuity capabilities.