Description

You will govern the enterprise disaster recovery framework, ensuring recoverability standards are defined, implemented, and sustained. You will oversee Business Impact Analyses to identify critical applications and dependencies, challenging BIAs for quality and alignment with resilience requirements. You will provide governance oversight for disaster recovery simulations, tabletop exercises, and recovery tests, evaluating outcomes to assess organizational ability to meet recovery objectives. You will maintain oversight of disaster recovery risks, findings, and corrective action plans, tracking remediation progress and escalating delays. You will support internal and external audits by coordinating evidence and preparing governance documentation, while driving continuous improvement through process enhancements. You will advise application owners on disaster recovery planning and act as an escalation point for complex governance issues.

Responsibilities

• Govern execution of the enterprise disaster recovery framework and enforce governance standards.
• Oversaw completion and maintenance of Business Impact Analyses to identify critical systems.
• Evaluate disaster recovery testing outcomes and recommend improvements to testing practices.
• Track and remediate risks, issues, and corrective actions identified through audits or testing.
• Support internal and external audits and drive continuous improvement of resilience controls.

Required Skills

• 6+ years of experience in cybersecurity governance, IT risk management, or disaster recovery.
• Experience governing or assessing BIAs, disaster recovery planning, and recovery testing.
• Working knowledge of disaster recovery frameworks such as ISO 22301 and NIST SP 800-34.
• Strong analytical, documentation, and stakeholder communication skills.
• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, or related field.
• Ability to apply policy pragmatically while maintaining control integrity.
• Experience in a large, complex, or regulated enterprise environment.

Preferred Skills

• Familiarity with GRC tools, risk registers, or audit management platforms.
• Relevant certifications: CBCP, CISA, CRISC, or CISSP.

Key Skills

Education

Bachelor's degree