The role
Reporting directly to the CR&CO, this strategic role will focus on and be responsible for our global business continuity and resilience planning.
The post-holder will advise and lead on all matters relating to business continuity and resilience and will assist with strategic planning and day-to-day operations. This will include the further implementation of a global business continuity framework to improve our organisational situation readiness, as well partnering with the Global Physical Security Manager to review the policy and process relating to physical security across the global estate.
The successful candidate will have significant experience in business continuity and resilience theory and practice. They will work alongside senior management (centrally and locally), the central Risk Team and local contacts to enhance/embed/assure the continuity of business operations, facilities, emergency preparedness and crisis management across the global network.
The role will have independence and should provide challenge where exceptions are sought.
What you will be responsible for
Review and enhance the Global Business Continuity and Operational Resilience Framework in line with the Firm's Enterprise Risk Management Framework. As part of that:
- All offices across the network are expected to hold practical and robust business continuity and resilience plans in the system of record 'Fusion Risk Management' to ensure Clifford Chance can:
- Respond to any major threat or incident that could damage our business;
- Safeguard the welfare and safety of our staff, stakeholders and the people we interact with;
- Maintain continuity of services to our global client base;
- Protect the assets, reputation, and value of the business.
- Develop and manage the system of record to enable delivery of the CC business continuity and resilience to align with ISO22301 to ensure continuous improvement.
- Create and continually review the Global Crisis Management Guidelines.
- Act as the conduit between the local and global crisis management teams during incidents.
- Manage the rollout of the crisis management structure globally
- Lead and facilitate 'in real time' scenario exercises, covering a wide range of topics.
- Ensure each office has the tools and framework to meet the above objectives and survive any physical or virtual disruption to its business operations, facilitating the timely return to business as usual.
- Working with stakeholders to ensure that, to the maximum extent possible, we are able to continue to support our client base of leading international organisations, even during a significant incident.
- Close collaboration with the global programme and senior business managers to enhance and deliver the firm's global business continuity and resilience framework. This will include identifying the appropriate strategies and tactics to achieve continuity, as well as appropriate threat mitigation measures and incident response structures.
- Further embed clear policy and process to align the framework with the firm's core business, risk appetite and IT processes, as well as its client engagement, business, legal and regulatory requirements.
- Resource and recovery plans for each office and region will be reviewed, response plans and tactics documented and tested.
- Build on existing practice and establish a global training and testing regime, with clear guidance on risk management, business recovery and alternative working arrangements.
- Develop and leverage the network of local resilience contacts, promoting compliance with the global approach whilst providing a pragmatic view on how to implement within each office/region.
- Partner with the Global Property Portfolio Manager to deliver a consistent approach on resilience across all locations.
- Work with the IT continuity and resilience manager to understand the business requirements verses IT capabilities align and identify any gaps.
- Provide SME input on strategic RFPs and participate in selection process where appropriate.
- Work with Supply Chain Management to develop and maintain minimum business continuity management standards for our suppliers.
- Provide SME input to fulfil client requirements for new business and existing client audits.
- Support the IT Risk and Security team in ensuring they have the appropriate information to comply with routine client requests.