Job: Business Management Officer

Location: Washington
Deadline: Tuesday, 12 November 2013

Background / General description:

World Bank Group Context::

Innovation and partnership bond the five institutions of the World Bank Group (WBG): the International Bank for Reconstruction and Development (IBRD) and the International Development Association (IDA), which together form the World Bank; the International Finance Corporation (IFC); the Multilateral Investment Guarantee Agency (MIGA); and the International Centre for Settlement of Investment Disputes (ICSID). The World Bank Group is one of the world's largest sources of funding and knowledge for developing countries. It uses financial resources and extensive experience to help our client countries to reduce poverty, increase economic growth, and improve quality of life. To ensure that countries can access the best global expertise and help generate cutting-edge knowledge, the World Bank Group is constantly seeking to improve the way it works. Key priorities include delivering measurable results, promoting openness and transparency in development, and improving access to development information and data.

Vice Presidency Context

Information and Technology Solutions (ITS) enables the WBG to achieve its mission of ending extreme poverty by 2030 and boosting shared prosperity in a sustainable manner by delivering transformative information and technologies to its staff working in over 130 client countries.

ITS services range from: establishing the infrastructure to reach and connect staff and development stakeholders; providing the devices and agile technology and information applications to facilitate the science of delivery through decentralized services; creating and maintaining tools to integrate information across the World Bank Group, the clients we serve and the countries where we operate; and delivering the computing power staff need to analyze development challenges and identify solutions.

The ITS business model combines dedicated business solutions centers that provide services tailored to specific World Bank Group business needs and shared services that provide infrastructure, applications and platforms for the entire Group. ITS is one of three VPUs that have been brought together as the World Bank Group Integrated Services (WBGIS), to provide enhanced corporate core services and enable the institution to operate as one strategic and coordinated entity.

Unit Context

ITS has established an ITS Service Continuity (ITSC) Program as a service to the WBG that i) develops technical and process capabilities to ensure the continued availability of WBG IT systems and services during business disruption ii) provides project management oversight of the implementation of those capabilities and iii) coordinates the development and testing of ITS VPU and Country Office IT service continuity and emergency management plans, policies, and processes. To support business continuity for the World Bank (IBRD, ICSID, MIGA, IDA) this program align with the WB Business Continuity Management Unit (BCMU) in the General Services Department (GSD). To support business continuity in the IFC, this program align with the IFC Business Continuity Program office (CPMBC) in Portfolio and Operational Risk Management Department(CPM). Supporting the IFC business continuity requirements is a new accountability that provides an opportunity for leveraging best practice technology and processes from both WB and IFC programs to design one convergent WBG program.

ITS is looking for an IT Business Officer to lead the WBG IT Service Continuity (ITSC) Program technology and risk areas. The IT Business Officer would coordinate technical components of program building, project management , documentation, resiliency exercise management and risk assessment. The position would also lead the integration and client relation efforts with the IFC. The position reports to the ITSC Program Manager.

Please note this vacancy is for IT Service Continuity/Disaster Recovery.

Note:

If the selected candidate is a current Bank Group staff member with a Regular or Open-Ended appointment, s/he will retain his/her Regular or Open-Ended appointment. All others will be offered a 2 year term appointment.

Duties and Accountabilities:

• The incumbent will lead the planning, implementing, testing and reporting of IT Service Continuity technical capabilities.
• He/she will lead a technical team including two other full time team members and a matrix team of engineers that cuts across the IT organization to continue evolving the IT Disaster Recovery (ITDR) position and resiliency strategy, ensure that the testing program is implemented, communicated, reported and risks are tracked.
• He/she will drive to optimize resiliency exercise processes to reduce risk and impact to the user, while also expanding our capabilities to ensure recovery per business requirements.
• The incumbent will organize the team to ensure that the business continuity requirements of IFC are integrated into the program.
• He/she must be able to interact with stakeholders at various levels in the organization, including technical leads, IT service delivery managers, IFC and WB Business Continuity program team, and ITS and IFC management to ensure that the program is properly executed and reported and that adjustments and improvements based on testing, business input and reports is continuously incorporated.
• He/she will liaise with the communication team to ensure appropriate communication of the program and exercises where they impact the business.
• Finally, he/she will also coordinate with IT Service Management process managers to ensure alignment of the program with appropriate ITS service delivery processes including Change, Problem, Incident, Availability and Compliance management.
• He/she will liaise with the ITS Risk/Compliance programs to ensure risks are appropriately tracked, monitored and managed.

Main Accountabilities:

• To provide project management leadership to the WBG ITSC program technical design and testing components.
• To ensure the ITSC program support of WB and IFC business continuity requirements.
• To ensure that the IFC Tier 1 and 2 systems architecture are aligned with the enterprise architecture standard for IT disaster recovery (ITDR).
• To ensure that IFC Tier 1 and 2 systems are tested on at least an annual basis in accordance with the ITSC Resiliency Exercise program endorsed by management and the institution
• To identify risks associated with assuring business continuity to IFC and WB systems and ITDR position and ensure they are tracked, and managed.

The main duties and responsibilities to support these functions, though subject to change based upon work program are the following:

IT Service Continuity Project Management

The IT Business Officer will act as the team lead for the IT Service Continuity technical, testing and risk components of the program.

The incumbent will guide the team in the development of a comprehensive IT Service Continuity plan to support existing WB business continuity requirements for HQ and the country offices.

Specific duties of the candidate will involve supporting the program manager in the following areas:

• Ensure planning, coordination, project management, execution and reporting of the ITS Resiliency Exercise program.
• Work with technical engineers to pull together an annual view of resiliency technology improvements, with impact on our service availability capabilities.
• Ensure that BIA results from the business are reviewed and a proposal to address changes to the scope of our ITDR position are presented to management.
• Facilitate coordination and tracking of the BIA gap solutions.
• Coordinate planning and documentation of the ITS Service Continuity technical plan to support Business Continuity requirements . The BC plan process should ensure that ITS's fiduciary responsibility to provide recovery of mission critical systems in the event of a disaster and ensure that each ITS and CIT staff and contractor is aware of and has the resources necessary to carry out his or her role.
• Coordinate project deliverables of ITS Service Continuity team members to toward delivery of joint resiliency exercise program objectives.
• Develop and maintain IT Disaster Recovery directive or directives for the institutional administrative manual and ensure alignment with information security policies, and Business Continuity policies.
• Support the program manager in defining and documenting the annual work program with regard to ITSC testing, resiliency technology capabilities reporting, risk assessment review and defining overall program direction.
• Liaise with the IFC Business Continuity program (CPMBC)and WB Business Continuity program office (GSDBC) to ensure close programmatic coordination and address institutional business requirements.

IT Service Continuity Program Convergence with IFC

The IT Business Officer will create an IT Service Continuity plan to support the IFC Business Continuity program for HQ and the country offices in alignment with the existing program. Specific duties of the candidate with regard to the integration of IFC and WB testing programs will involve supporting the program manager in the following areas:

• Participate in annual or bi-annual risk assessment to review operational ITDR risk.
• Work with the technical infrastructure and application teams to design the technical solution to mitigate any risks found, either during an assessment or exercises.
• Coordinate planning and documentation of the ITS Service Continuity plan to support IFC Business Continuity requirements . The ITSC plan process should ensure that ITS's fiduciary responsibility to provide recovery of mission critical systems in the event of a disaster and that each ITS and CIT staff and contractor is aware of and has the resources necessary to carry out his or her role.
• Liaise with the IFC technical teams to create resiliency exercise checklists, ensure periodic review, and use of them during annual exercises.
• Liaise with the IFC business stakeholders to update requirements and ensure ITDR position and ITSC processes continue to meet them.
• Develop and maintain IT Disaster Recovery directive or directives applying to the IFC for the institutional administrative manual and ensure alignment with information security policies, and Business Continuity policies.
• Support the program manager in defining and documenting the annual work program components related to IFC, and other supporting documentation, including policy, standards, project plans, communications, presentations, meeting minutes, reports and other program-related documents.
• Update the program with components and information pertinent to CIT.
• Coordinate with ITSC team members for program management reporting to IFC.
• Manage specific IFC related ITSC projects as they arise.

• Development of IT Resiliency and Disaster Recovery Plans and Documentation

Work the ITSC team and with application and infrastructure service delivery teams to ensure development and documentation of responses to specific ITDR scenarios.

• Develop documentation checklists for loadshifting or testing mission critical (tier 1 and 2) business systems individually and in groupings determined by technical dependencies, resources and priority.
• Support ITS Emergency Management team in responding to major/emergency incident situations.
• Assist clients with developing system recovery plans and documentation.

IT Resiliency Testing Program

Liaise with IT community to facilitate ongoing testing and reporting on IT resiliency and service continuity capabilities.

• Develop, document and maintain an ongoing IT Resiliency testing program that incorporates dual data center production operating model to provide assurance of the viability of ITS's IT DR position and operational resiliency in support of the institutional BC strategy as a whole.
• Ensure planning and implementation of annual ITS System and Data Center Resiliency exercises.
• Work with technical teams to design the resiliency exercises for the various technical components and systems that are listed in the resiliency testing program.
• Evolve resiliency exercise process capabilities, to reduce risk and impact, automate where feasible, expand capabilities across more staff. This will involve, but is not limited to:
• Review the testing plans and risks identified with the technical teams for technical and process capability optimization.
• Develop an entire data center shutdown and/or loadshift scenario including order based on technical dependencies and resources.
• Ensure development of prioritization process for shutdown or loadshift for scenarios where time is limited.
• Work with ITSC team, vendors and technical teams to design technical emergency response scenarios for emergencies and exercise purposes.
• Develop documentation checklists for loadshifting or testing mission critical (tier 1 and 2) business systems individually and in groupings determined by technical dependencies, resources and priority.
• Support ITS Emergency Management team in responding to major/emergency incident situations.
• Expand the resiliency testing program to include clients and VPUs. Liaise with clients and stakeholders to define and implement testing processes and procedures. Assist clients with developing system recovery plans and documentation.
• Ensure that Biannual reporting on the test program is delivered to management.
• Risk Management and Compliance with IT Resiliency Standards

Ensure that IT infrastructure and business applications meet IT resiliency requirements to support business recovery time objectives.

• Support deployment and management of process (es) for identifying mission criticality of newly proposed business applications.
• Map critical IT infrastructure for our clients, identifying points of failure and potential business disruption. Identify and document gaps and risks in ITS systems compliance with ITDR architectural standards.
• Work with the service delivery teams to develop proposals for technical and process solutions to identified gaps.
• Review exercise outcomes with the technical teams to identify dependencies, points of failure, and other risks to WBG ITDR position and ensure reporting and ongoing tracking.
• Liaise with ITS Risk Program to ensure continued risk assessment, tracking and reporting on risks and gaps and their resolution.
• Benchmark ITS/WBG capabilities against external best practices and standards to keep target capabilities current.
• Participate in audit and compliance processes.

Selection Criteria:

Core Competencies for this Position

• Leadership - Sets standards, drives consensus and cooperation among team members.
• Risk Management - Assesses the probability associated with varying degrees of risk.
• IT Service Management - Coordinates tasks required for one or more processes in the IT Service Management support or delivery processes.
• Business Function Knowledge - Engages business and technical leaders in the identification of medium-term business solutions consistent with best practices for cross-functional implementation.
• Client Orientation - Maintains client relationships in the face of conflicting demands or directions and provides evidence-based advice and solutions based on sound diagnosis and knowledge.
• Drive for Results - Identifies the needed resources to accomplish results involving multiple stakeholders and finds solutions to obstacles affecting key deliverables.
• Teamwork (Collaboration) and Inclusion - Shows leadership in ensuring the team stays organized and focused, and actively seeks and considers diverse ideas and approaches.
• Knowledge, Learning and Communication - Excels in sharing of best practice, trends, knowledge and lessons learned across units and with clients and partners, articulating ideas verbally and in writing in a clear and compelling way across audiences of varied levels.
• Business Judgment and Analytical Decision Making - Gathers inputs, assesses risk, considers impact and articulates benefits of decisions for internal and external stakeholders over the long term.
• Initiative - Describes future scenarios and related opportunities.

Selection Criteria:

• The applicant must have a strong knowledge of industry best practices in IT Service Continuity process methodologies and Business Impact Analysis knowledge.
• He/she will have experience in system infrastructure management or design, software development lifecycle activities and have a solid understanding of the steps needed for putting a new system or service into production, and maintaining it thereafter.
• Knowledge of ISO20000 and ISO27001 standard and the ITIL framework is required. Broad knowledge of other industry standards and frameworks is a plus.
• Master's Degree in Business Management with an IT track or related field with 5 years' experience preferably in a multi-system, multi-platform, mid- to large enterprise IT infrastructure or data center operations or ITDR planning.
• Bachelor's Degree is a minimum requirement with at least 7 years of relevant experience;
• Professional certification in IT Disaster Recovery Planning, such as CBRITP or CBRM is required. Certification in Business Continuity Planning, such CBCP or MBCP is a plus.
• Strong understanding of data center operations, IT system and infrastructure relationships and dependencies based on the OSI stack.
• Strong knowledge of broad range of hardware and software products;
• Knowledge of regulations related to financial services and information (IT) business continuity/risk management;
• Previous experience coordinating IT Disaster Recovery planning and testing related to IT systems infrastructure and business applications;
• Demonstrated ability to understand Business Continuity management and requirements from an IT service continuity and IT disaster recovery perspective and address them in a responsive and comprehensive manner;
• Ability to design business and technical processes to support an IT service continuity position for an organization; ITIL certification is a plus
• Solid project management skills: ability to lead all aspects of project planning, design, development and implementation of projects; PMP certification is a plus
• Proven conceptual, analytical and evaluation skills, including ability to prepare a risk analysis associated with outcomes of testing, project management and program implementation decisions;
• Strong administrative skills, with effectiveness in developing tasks and managing resources to achieve target dates;
• Strong written/verbal communications. Must be able to communicate efficiently and effectively with business partners and executive management;
• Ability to liaise with IT community to facilitate IT resiliency testing, reporting and management of recovery issues;
• Ability to work closely with diverse international and cultural backgrounds.
• Demonstrated ability to train and mentor junior staff.
• Experience with complex and integrated application environments, primarily based on IBM WebSphere and Oracle relational databases
• Experience working in a large, complex global organization in an IT related field;
• Excellent interpersonal skills, including ability to work effectively in a team/task force as a participant or team leader.
• Demonstrated sensitivity to the Bank's distinctive demographics and cross cultural context and influences, including the ability to build effective work relationships with clients and colleagues;
• Initiative and resourcefulness in complex environments;
• flexibility and ability to prioritize conflicting demands in high-pressure and time-critical situations.
• Excellent oral and written communication skills in the English language.
• Able to prepare, present, and defend/explain technical report information to diverse types of audience (management, users, vendor, and technical staff) in a way that establishes rapport and shares understanding.
• Demonstrated ability to produce a wide range of deliverables such as memoranda, requirements documents, status reports, terms of reference (TORs), project plans, etc.
• Professional qualification and certification in IT related business process and compliance standards and frameworks that include IT Disaster Recovery and Business Continuity as key components, eg CFCP or CBCP, CBRITP, and other related certifications (ITIL, ISO20000, ISO27001, BS25999 etc.) preferred.

More Info and Application