Head of BCIM Japan

Job Purpose

As Country Head of Business Continuity and Incident Management (BCIM) you’ll report into the Head of Business Risk and Resilience (BRR) within the Global Chief Operating Office (GCOO) and will be directly responsible for controls designed to reduce the impact and severity of any disruption associated with the loss or unavailability of people, systems, premises and third parties or any other incident where there are customer, regulatory, reputational and/or financial impacts. 

The role of BCIM is to ensure three controls are effectively maintained and executed, with these being 1) the BCIM lifecycle, 2) BCIM program, and 3) Major Incident Management (MIM), with continuous monitoring and testing efficacy of these key controls required to effectively support crisis response to incidents when they occur.

The BCIM function acts as a subject matter expert in advising stakeholders across all businesses in all HSBC entities in Japan, in addition to performing quality assurance reviews. 

Working with the wider global and regional BCIM teams, risk controls are managed to agreed standards, representing all business functions to senior and executive management whilst engaging with relevant regulators and other relevant agencies as required.

Key Responsibilities

Impact on the Business/Function

Control Ownership

• Ensure BCM, MIM and BCIM Lifecycle controls operate in line with established procedures and standards and in accordance with local law and regulations
• Through the Business and Operational Resilience Program (OpsRes) lens, and in partnership with the regional BCIM team, ensure local Business and Functions have a clear understanding of the appropriateness of the BCIM Lifecycle controls and their effectiveness of these.
• Execute required control monitoring, ensuring this is in line with standards agreed with the regional BCIM team and policy guidelines.
• Manage identified issues, ensuring that required mitigating activity is prioritised and actioned.
• Identify and escalate changes in the local risk environment then agree appropriate actions with assistance from the regional BCIM team, market stakeholders and 2LoD risk stewards.
• Ensure local control reporting is produced in line with regional BCIM team, Head of BRR and regulators.
• Contribute to the completion of Risk and Control Assessments with assistance from the regional BCIM team, Chief Control Officer & Third-Party Management (CCO & TPM) and market risk stewards (if required).

Business Continuity

• Provide expert assistance and support to local Businesses and Functions as they fulfil their analysis (BIA), planning (BCP) and exercise (BCE) obligations.
• In line with maturing OpsRes standards, provide local support on both the use and the content quality required for the Business Continuity Planning Tool (BCMNow) and Emergency Notification System (SECOM & Everbridge).
• Review metrics and evaluate completeness of Business and Functional obligations for both Important Business Services (IBS) and non-IBS business divisions. Agree to remediation activities if not in line with expectations.
• Manage the planning and execution of an effective, fit-for-purpose annual business continuity program.
• Oversee any local recovery site provisioning ensuring both availability and implementation of required items.
• Support Real Estate Services (RES) by coordinating business recovery needs in assets occupied by HSBC and ensure these are included in the RES strategic planning process.
• Support the effective function of OpsRes (quarterly Resilience Management and Governance forums) by providing BCIM content, leadership, and stakeholder engagement.

Major Incident Management

• Ensure the mandated MIM controls are in place and enable an effective market Major Incident Group (MIG) response capability (including the preparation and facilitation of MIG member training and exercises).
• Perform threat monitoring and provide timely escalation and updates to MIG Chair, regional BCIM team and stakeholders.
• Assist the MIG Chair as Secretary for any local MIG invocation. Facilitate the MIG invocation process and assist the Chair in the management of MIG meetings.
• Execute Emergency Notifications to impacted stakeholder groups as directed by MIG, GCOO and the Regional BCIM team.
• Follow Group standards relating to incident logging, management of the Emergency Notification Process (ENS) and the performance of post incident reviews.

Operational Resilience (OpsRes)

• Support the IBS Business Service Owners (BSOs) by providing subject matter expertise and training on Business Continuity aspects within the Operational Resilience Program and ongoing support throughout the annual lifecycles.
• Own the overall responsibility of BCIM led deliverables with the OpsRes program and work jointly with the Centre of Excellence team, Working Groups, in critical decision making and maturity of the program.
• Support the preparation, assessment and facilitation of tests along with 1 & 2 LoD SMEs to validate the severity & plausibility of the Scenarios.
• Undertake analysis of the IBS mapping including interdependencies across people/processes/technology/premises.
• Provide SME guidance for the documentation of the IBS level BIAs / BCPs and Incident Management escalation structures through workshops.
• Conduct deep dive reviews of Department level BIA / BCP contents with a view of aligning their impacts and responses to IBS Recovery Time Objectives and Impact Tolerances.
• Attend test planning & project working groups and other meetings as required.
• Consistently evaluate the project to identify areas for improvement and take action where necessary.
• Escalate actual and potential issues to stakeholders in a timely manner.
• Ensure compliance with applicable, local regulation and HSBC guidelines, making sure to employ the higher standard of controls. Maintain awareness of applicable regulations on BCIM and OpsRes.

Regulatory

• • Ensure compliance with applicable local regulation and HSBC guidelines, making sure to employ the higher standard of controls
  • Execute timely submission of required items in consultation with Regulatory Compliance to satisfy regulatory obligations.

Customers / Stakeholders

• Develop and maintain trusted relationships with local market, business and functional COOs and their teams
• Represent BCIM locally, act as an advocate for the Function and ensure there is a clear understanding of the role of both BCIM and the local delivery priorities
• Establish ongoing communications with all Businesses and Functions, and senior management.
• Participate fully, where required, in local risk and control forums and working groups to elevate BCIM standards and incident readiness.
• Acting as the Engagement Manager for any BCIM, locally owned, third-party relationships working with CCO & TPM.

Leadership & Teamwork

• Engagement and participation with regional BCIM team.
• Engagement and participation with market Performance Services (PS), and GCOO office.
• Lead by example, demonstrating integrity, accountability and timely responses to foster teamwork and awareness across all business units.
• Build and motivate a capable, engaged and inquisitive local team.
• Foster collaboration and exchange with other HSBC entities in market.
• Support multiple functions in RES (acting as operational secondary support for Protective Security).

Operational Effectiveness & Control:

• Understand the operational risks inherent in the business, taking account of changing economic or market conditions, legal and regulatory requirements, operating procedures and practices, management restructurings, and the impact of new technology on the business requirements ways of working (WoW).

Requirements

Major Challenges:

• Understand the local business and threat environment
• To develop excellent relationships with a wide variety of senior stakeholders and be an effective advocate and communicator over BCIM requirements.
• To have an expert level understanding of the BCIM Lifecycle, Program and MIM.
• Evolving regulatory environment requiring the ability to respond to regulatory needs with a balanced approach to risk and operational requirements.
• To work closely with regional BCIM teams to ingest and outwardly share applicable best practices to elevate HSBC global BCIM and OpsRes standards.
• To be able to effectively work and navigate within a complex organizational environment to deliver outcomes.
• Operate with a cost-conscious environment whilst balancing the needs of safety of people, process and premises.

Certifications, Qualifications & Experience:

• Experience in risk or control management.
• Subject matter expert and proven track record in managing a Business Continuity & Incident Management Programs.
• Experience in managing incidents, training senior executives and facilitating crisis exercises.
• Strong understanding of global and local Business Continuity and Incident Management requirements.
• Ability to translate global, regional and local priorities to direct local activities.
• Operates effectively with an ability to make decisions under pressure and to tight deadlines.
• Experience of working in highly regulated and complex international organizations.
• Excellent written and verbal communication skills, with the ability to influence stakeholders at all levels.
• Ability to balance multiple competing priorities.
• Innovative solutions orientated individual.
• High ethical standards and embodies a critical thinking mindset.
• As a minimum, Business Level fluency in Japanese and English is a pre-requisite.