VP, BCM Governance & Framework

Lead the governance, strategy and assurance of Bursa Malaysia's Business Continuity Management (BCM) programme to ensure the Exchange maintains effective recovery capabilities, operational continuity and compliance with regulatory expectations and Financial Market Infrastructure (FMI) recovery requirements.

The role is responsible for establishing enterprise-wide BCM governance, overseeing recovery readiness and testing programmes, providing independent challenge and oversight of BCM capabilities, and driving continuous improvement of the Group's resilience and recovery posture. This includes engagement with senior management, regulators and key stakeholders to ensure BCM remains aligned with business, regulatory and strategic objectives.

1. BCM Governance, Strategy & Framework Management

• Establish and maintain the enterprise BCM Framework, policies, standards and governance arrangements.
• Define and execute BCM strategy aligned with organisational priorities, regulatory expectations and FMI recovery requirements.
• Oversee BCM governance forums, reporting structures and accountability mechanisms.
• Promote consistent BCM practices across business, technology and support functions.
• Provide strategic direction on BCM maturity and recovery capability enhancement.

2 . Business Impact Analysis (BIA) Governance

• Oversee the enterprise Business Impact Analysis (BIA) programme.
• Review critical business services, recovery priorities and service dependencies.
• Challenge recovery time objectives, recovery point objectives and recovery strategies.
• Ensure BIA outcomes are regularly reviewed and remain aligned with business and regulatory expectations.
• Monitor emerging risks that may impact recovery capability.

3. BCM Assurance, Testing & Recovery Readiness

• Oversee BCM plan development, maintenance and periodic review.
• Lead enterprise BCM testing and recovery readiness programmes.
• Review outcomes of BCM exercises, simulations and testing activities.
• Assess recovery capability effectiveness and challenge identified weaknesses and control gaps.
• Monitor remediation activities arising from testing and assurance reviews. exercises.

4. Regulatory Compliance & Recovery Oversight

• Ensure compliance with regulatory requirements relating to BCM, recovery planning and operational resilience.
• Support regulatory reviews, inspections, audits and information requests.
• Oversee recovery readiness reporting and assurance activities.
• Monitor compliance with internal BCM policies and recovery standards.
• Escalate significant recovery risks, weaknesses and compliance concerns to management.

5. Recovery Capability & Dependency Oversight

• Oversee recovery arrangements across critical business services and supporting functions.
• Review dependencies relating to people, process, technology, facilities and third parties.
• Monitor concentration risks and recovery vulnerabilities affecting critical services.
• Support enterprise-wide recovery planning initiatives and resilience enhancement programmes.

6. BCM Maturity Assessment & Continuous Improvement

• Lead BCM maturity assessments and continuous improvement initiatives.
• Benchmark BCM capabilities against regulatory expectations, industry practices and recognised standards.
• Identify capability gaps, enhancement opportunities and strategic resilience priorities.
• Drive implementation of BCM improvement roadmaps and transformation initiatives.

7. Stakeholder Management & Advisory

• Serve as a trusted advisor to senior management on BCM and recovery-related matters.
• Engage business units, technology teams, regulators and external stakeholders on BCM initiatives.
• Promote BCM awareness, accountability and resilience culture across the organisation.
• Facilitate collaboration across operational resilience, crisis management and recovery functions.

8. Governance, Reporting & Performance Monitoring

• Prepare management and Board reports relating to BCM effectiveness, recovery readiness and resilience performance.
• Monitor BCM metrics, recovery indicators and programme performance.
• Provide oversight reporting on BCM testing, assurance activities and remediation progress.
• Support management decision-making through timely reporting and analytics.