M-Pesa MGR Operational Resilience & BCM

## Role Purpose

This poistion's main purpose is to lead the Vodacash Business Continuity and Operational Resilience capability, so that important business services such as payments, transfers, cash-in/cash-out and the agent network keep running, or recover within approved impact tolerances, when severe disruptions occur.

The role sets policies, coordinates and challenges first-line preparedness, and gives Management and the Board a clear, independent view of Vodacash’s resilience. In doing so, it protects customers, reputation and financial stability, and supports compliance with BCC and Group requirements.

## Core Responsibilities

• Own and maintain the BCM and Operational Resilience policies and methodology.
• Coordinate Business Impact Analyses and review the adequacy of business continuity and disaster recovery plans owned by first-line teams.
• Identify important business services, map their end-to-end dependencies, and facilitate Board-approved impact tolerances.
• Plan and run continuity exercises and severe but plausible scenario tests, and track remediation closure.
• Assess critical third-party and intra-group dependencies, including exit and substitution arrangements.
• Support the crisis management team during major incidents and lead post-incident reviews.
• Promote resilience awareness and training across the business, while providing constructive challenge.

## Key Knowledge

• BCM and operational resilience methods: BIA, recovery strategies, RTO/RPO, important business services, impact tolerances, severe but plausible scenario testing;
• Standards and regulations: BCC Instruction 36, ISO 22301 and ISO 22316, the BCBS Principles for Operational Resilience, and the Principles for the Sound Management of Operational Risk.
• Operational risk framework: RCSA, KRIs, loss and incident data, risk appetite.

## Core Compentencies

• Analytical thinking: maps complex end-to-end dependencies and spots single points of failure.
• Facilitation: runs effective BIA workshops and tabletop exercises with senior participants.
• Communication: writes concise, decision-oriented reports for executives in French and English.
• Programme management: plans and delivers a multi-year resilience programme accross many stakeholders

## Qualifications

• Degree in Business, IT, or a related field.
• At least 5 years' experience in business continuity, operational risk or technology risk, ideally in banking, mobile money or telecoms.
• ISO 22301 Lead Implementer certification is an advantage.

## Key Performance Indicators

• 100% of critical processes covered by current BIA and approved BCP.
• 100% of important business services mapped with approved impact tolerances.
• Material remediation actions closed on time; resilience reporting delivered every quarter.