Business Continuity & Disaster Recovery Manager
Develops and manages plans to ensure organisations can continue critical operations during and after disruptions — natural disasters, cyberattacks, power outages, political unrest, pandemics or supply chain failures. Combines risk assessment, crisis management planning, IT disaster recovery and organisational resilience. In Kenya — where businesses face risks from terrorism, political violence, floods, droughts, power instability and cyber threats — business continuity managers are increasingly essential for operational resilience and regulatory compliance.
- AI exposure
- 46 of 100, moderate exposure
- Hiring trend
- Rising
- Hiring rate
- 40%
The role
What the work is, what it pays, and what it costs you.
At a glance
- Remote friendly
- Yes
- Freelance potential
- Medium
- Time to senior
- 7 years
A day in the role
Conducts a business impact analysis for a bank's critical operations — identifying RTO and RPO for core banking systems. Updates the organisation's business continuity plan — incorporating lessons from a recent power outage that disrupted operations. Organises a tabletop exercise simulating a cyberattack — testing the crisis management team's response. Reviews the IT disaster recovery plan — testing backup restoration from cloud. Presents the BCP compliance report to the board's risk committee.
What it pays
Kenyan market, per month- Entry
- KES 60,000-120,000
- Mid
- KES 150,000-300,000
- Senior
- KES 350,000-700,000
Exposure
How much of this a machine can already do, and how that was worked out.
Where this rating sits
1,516 rated careersRated above 61% of the 1,516 careers in the catalogue, which averages 43. Inside business the mean is 55, across 118 careers.
Named task by task
Already automated
- AI-powered risk scenario generation from threat intelligence and historical incident data
- Automated business impact analysis (BIA) data collection and processing
- AI-assisted disaster recovery plan testing and gap identification
- Predictive threat monitoring with real-time alert generation
Still human
- Conducting business impact analysis (BIA) — identifying critical business functions, recovery time objectives (RTO), recovery point objectives (RPO) and dependencies
- Developing business continuity plans (BCP) — documenting procedures for maintaining operations during disruptions, including alternate work arrangements, communication protocols and resource allocation
- Developing IT disaster recovery plans — backup strategies, failover systems, cloud recovery, data restoration procedures
- Conducting risk assessments — identifying threats (natural, technological, human, political), assessing likelihood and impact, prioritising mitigation measures
- Organising and facilitating BCP exercises — tabletop exercises, simulation drills, full-scale recovery tests to validate plans and train staff
- Coordinating crisis management — establishing crisis management teams, communication protocols, decision-making frameworks and escalation procedures
- Ensuring regulatory compliance — CBK operational resilience requirements for banks, IRA business continuity requirements for insurers, ISO 22301 certification
- Training staff — raising awareness, conducting drills, ensuring all staff know their roles during disruptions
Task counts
- Displacing
- Minimal — BCP requires human judgement, crisis management and organisational coordination that AI cannot perform.
- Augmenting
- AI risk scenario generation improves planning. Automated BIA data collection saves time. Predictive threat monitoring enables proactive response.
- Creating
- AI-driven BCP platforms create new roles for managers who can integrate AI threat monitoring with crisis management and organisational resilience.
Sources
Behind the rating- CBK operational resilience requirements
- Kenya risk landscape (terrorism, political, natural)
- DRII certification data
- COVID-19 BCP lessons learned
Getting in
The routes into the role and what each one asks for.
What to study
8 courses- Certificate in Credit ManagementKsh 24,000a year
- Certificate in Corporate DiplomacyKsh 36,500a year
- Diploma in Social EntrepreneurshipKsh 56,400a year
- Certificate in Social EntrepreneurshipKsh 60,000a year
- Diploma in Cooperative ManagementKsh 67,100a year
- Artisan in Office Assistance Level Four (TVET-CDACC)Ksh 67,189a year
- Artisan in StorekeepingKsh 67,189a year
- Artisan in Supply Chain ManagementKsh 67,189a year
How people get in
BSc/BCom + DRII certification + BCP experience
5-7 yearsVery high cost
BSc or BCom from UoN, KU, Strathmore or USIU plus DRII CBCP certification and experience in risk management or IT operations
IT operations + BCP specialisation
5-8 yearsMedium cost
Build IT operations or security experience, then specialise in business continuity through DRII certification and on-the-job BCP work
Who hires
- Safaricom
- KCB Bank
- Equity Bank
- UN Agencies
- Telecom Companies
- Government
Common misconceptions
Business continuity is just IT disaster recovery
IT disaster recovery is one component. BCP covers all critical business functions — people, facilities, suppliers, communications, legal, finance. A BCP for a bank includes branch operations, customer communication, regulatory notification, staff safety and alternate processing sites — not just IT systems.
BCP is a document you create once and file away
Effective BCP requires continuous maintenance — updating plans for organisational changes, conducting regular exercises, testing recovery procedures, incorporating lessons from incidents and disruptions. A BCP that hasn't been tested is just a document.
Kenya doesn't have enough risks to justify BCP investment
Kenya faces significant operational risks — terrorism, political violence, floods, power instability, cyber threats, pandemics. The 2007-2008 post-election violence, 2013 Westgate attack, 2019 Riverside attack and COVID-19 all demonstrated the need for robust BCP. Organisations without BCPs suffered major losses during these events.
What happens next
How the role changes from here, and where it leads.
Growth outlook
- Net demand change
- +15%
- Over
- 2026-2028
- Drivers
- Regulatory requirements (CBK, IRA operational resilience),Increasing cyber threats requiring recovery planning,Climate change increasing disaster frequency,Post-COVID-19 BCP awareness,Political risk management needs
- Headwinds
- BCP often viewed as compliance overhead,Limited budget for exercises and testing,Difficulty maintaining plans current,Low board-level awareness in some organisations
What to learn
- AI-powered threat monitoring and risk scenario generation
- Cloud-based disaster recovery and backup strategies
- Cyber resilience (combining cybersecurity and BCP)
- Remote work and distributed operations continuity
- ISO 22301 and regulatory compliance frameworks
Kenyan market notes
Business continuity is growing in importance in Kenya due to increasing operational risks and regulatory requirements. Key risks: terrorism (al-Shabaab attacks in Nairobi, Mombasa, northeastern Kenya), political violence (election cycles — 2007-2008 post-election violence was a major BCP test), natural disasters (floods in Nairobi, western Kenya; droughts in arid areas; landslides), power instability (KPLC grid failures, rationing), cyber threats (increasing ransomware and phishing attacks), pandemics (COVID-19 was a massive BCP event), supply chain disruptions. Regulatory requirements: CBK (Central Bank of Kenya) requires banks to have BCPs and operational resilience frameworks, IRA (Insurance Regulatory Authority) requires insurers to maintain BCPs, capital markets regulations require operational resilience. ISO 22301 (Business Continuity Management Systems) is the international standard — some Kenyan organisations are certified. Key sectors employing BCP managers: banking (all major banks — Equity, KCB, Cooperative, Standard Chartered, Barclays/ABS), telecom (Safaricom, Airtel — critical infrastructure), government (national and county), international organisations (UN, NGOs), manufacturing, healthcare. DRII (Disaster Recovery Institute International) offers the CBCP (Certified Business Continuity Professional) certification — recognised globally. Key challenges: many organisations treat BCP as a compliance exercise rather than operational capability, limited budget for BCP exercises and testing, difficulty in maintaining plans current, and low awareness at board level. Salary: entry KES 55,000-100,000 (BCP analyst), mid KES 130,000-280,000 (BCP manager), senior KES 320,000-700,000+ (head of operational resilience or chief resilience officer).
Further reading
This role is rated 46 out of 100 today. Save it and the app keeps that number, then tells you by how much it has moved when the record is next reviewed.