Job Purpose:
The Technology Resilience Manager provides Group-wide assurance that the technology supporting Bank ABC’s important business services can withstand, respond to and recover from disruption within approved impact tolerances.
The role supports Group IT’s technology resilience governance, recovery capability, and configuration and asset integrity processes across on-premises, cloud and SaaS environments, with ServiceNow as the system of record.
The role sits within Group IT as the first line of defence. It sets standards, assures conformance and reports on resilience posture. Accountability for designing, building, operating and recovering individual services, and for the accuracy of their configuration and asset data, remains with the respective service, platform and configuration item owners.
Principal Re sponsibilities, Accountabilities and Deliverables of Role:
1. Resilience governance and operational resilience Maintain the Group IT technology resilience framework, standards and minimum requirements for on-premises, cloud and SaaS environments, aligned to the Group Operational Resilience framework.
Working with Business Continuity Management and Operational Risk, map important business services to their supporting applications, infrastructure, data and third parties, and maintain these mappings in ServiceNow.
Translate approved impact tolerances into technology recovery objectives (RTO and RPO) and report gaps between required and demonstrated recovery capability.
Define resilience requirements for new applications, technologies, cloud services and major changes, and assure conformance through Technology Risk Assessments and the Design Authority, including the Core Banking Replacement programme.
Conduct resilience risk assessments and Risk and Control Self-Assessments, including System Security Plans where applicable, and track findings to closure.
Maintain the inventory of resilience, Disaster Recovery, Business Continuity, outsourcing and cloud regulatory requirements (including CBB, MAS, FFIEC and other jurisdictional expectations), monitor developments and assess Group IT conformance.
2. Recovery capability Own the Group IT Disaster Recovery framework and standards. Ensure that DR plans, runbooks and recovery procedures for Group applications are complete, current, accessible and approved by their owners.
Design and govern the annual technology resilience testing programme, covering DR tests, cloud resilience exercises, SWIFT tests and tabletop exercises based on severe but plausible scenarios. Validate achieved RTO and RPO, issue test reports and track remediation.
Maintain the Group IT Business Continuity Plan so that it reflects changes to technology, operations, locations and services, and keep Resilience One up to date.
Set backup and restore standards, including protected or immutable copies for critical data, and assure periodic restore testing with the Infrastructure teams.
Set standards for local Disaster Recovery activities in overseas units, provide advice and monitor implementation through key risk indicators.
3. Configuration and asset integrity Provide proactive support for Managed Assets (hardware and software) and Managed Configuration within the GIT Process and Control Framework.
Drive the resilience outcomes of ServiceNow ITOM and ITAM, including Discovery reconciliation, Service Mapping for critical services, and Hardware and Software Asset Management, in partnership with the ServiceNow platform team.
Specify and own the automated ServiceNow controls that assure Production and DR parity. Own the parity exception process and monitor the change management controls that support it, including for changes from strategic programmes.
Monitor CMDB completeness and accuracy for critical services and escalate data gaps to the accountable configuration item owners.
Use asset and configuration data to identify end-of-life or unsupported technology, single points of failure and concentration risk…