Mission.
1. Design an end-to-end IT Business Continuity Plan (IT-BCP), including Business Impact Analysis (BIA) with RTO/RPO definitions and recovery strategies, tailored to insurance-specific processes and applications.
2. Map ICT dependencies and third parties (including cloud/SaaS providers), covering contractual continuity requirements, exit scenarios, and maintaining a register of critical providers.
3. Develop continuity and recovery procedures (data recovery, workplace continuity, and alternative IT operating modes during prolonged disruptions), with clear role allocation.
4. Align with governance and risk functions (including DORA expectations related to governance and risk management) and internal stakeholders.
5. Collaborate closely with the overall BCP lead.
6. Establish a testing and exercise program for the various procedures, including documentation of results and improvement actions.
7. Prepare operational documentation (version control, change tracking, lessons learned) and practical guidelines for teams.
Required profile.
8. Mandatory: Proven experience in drafting and implementing an audit-proof IT-BCP in a regulated environment.
9. Mandatory: Knowledge of ISO 22301 (Lead Implementer or Auditor certification preferred), NIST SP 800-34, and ISO/IEC 27031.
10. Experience implementing a BCMS using the BCI Good Practice Guidelines (GPG), ideally complemented by CBCI certification or higher, is a strong asset.
11. Familiarity with DORA requirements (ICT risk management, incident management, testing, and third-party oversight) for financial institutions.
12. Strong analytical and communication skills.
13. Independent, structured, and hands-on working style.
14. Fluent in Dutch or French, with excellent English proficiency.