Business Continuity, Crisis & Cyber Resilience Senior Manager

Role Overview
Lead the development, implementation, and continuous improvement of the organization’s Business Continuity Management (BCM), Crisis Management, Operational Resilience, and Cyber Recovery capabilities. The role is responsible for ensuring the organization can effectively prepare for, respond to, recover from, and adapt to business disruptions, cyber incidents, operational failures, and major crises.

Key Responsibilities

• Lead the Business Continuity Management (BCM) framework, policies, standards, governance, and lifecycle.
• Conduct and oversee Business Impact Analysis (BIA) and Risk Assessments, identifying critical business processes, dependencies, impacts, Recovery Time Objectives (RTOs), and Recovery Point Objectives (RPOs).
• Develop, maintain, and test Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), and recovery strategies.
• Lead the design and implementation of Crisis Management frameworks, including crisis response structures, escalation protocols, crisis communications, and executive decision-making processes.
• Develop and maintain Crisis Management Plans (CMP) and coordinate crisis simulations and exercises with senior leadership.
• Establish and manage Incident Management capabilities, including incident response, escalation, command-and-control, stakeholder coordination, and post-incident reviews.
• Lead Cyber Recovery and Cyber Resilience planning, ensuring critical business services can recover following ransomware, cyberattacks, data compromise, system outages, and other technology-related disruptions.
• Coordinate with Cybersecurity, IT, Technology, Risk, Internal Audit, Compliance, and business functions to align cyber recovery and technology disaster recovery capabilities.
• Develop and test Cyber Recovery Plans, including recovery priorities, clean-room/recovery environments, backup and restoration strategies, critical applications, infrastructure, and data dependencies.
• Establish Operational Resilience frameworks covering critical business services, people, processes, technology, facilities, suppliers, and third-party dependencies.
• Design and lead BCM, crisis management, disaster recovery, cyber recovery, and incident response exercises, including tabletop exercises and simulation scenarios.
• Define and monitor BCM KPIs/KRIs, maturity assessments, remediation plans, and resilience metrics.
• Ensure compliance with relevant regulatory, industry, and international standards, including ISO 22301, ISO 27001, NIST, DORA, and applicable regulatory requirements.
• Lead third-party and supplier resilience assessments, including Business Continuity and Disaster Recovery (BC/DR) requirements.
• Provide senior management and executive committees with reporting on organizational resilience, critical risks, preparedness, gaps, and remediation.
• Lead continuous improvement through lessons learned, post-incident reviews, root-cause analysis, scenario analysis, and resilience testing.
• Manage BCM and resilience teams, consultants, vendors, and strategic transformation initiatives.

Qualifications

Required Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, Business Administration, Engineering, or a related field.
• Proven years of experience in Business Continuity Management (BCM), Operational Resilience, Disaster Recovery, Crisis Management, Cyber Resilience, Risk Management, or related disciplines.
• Proven experience developing and implementing enterprise-wide BCM, Crisis Management, and Operational Resilience frameworks.
• Hands-on experience conducting Business Impact Analysis (BIA), risk assessments, and defining recovery strategies, including RTOs and RPOs.
• Experience designing, testing, and maintaining Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), and Crisis Management Plans (CMP).
• Strong understanding of Incident Management, Crisis Response, and Major Incident Handling processes.
• Experience working with senior leadership and executive committees during crisis situations, resilience exercises, and decision-making events.
• Strong stakeholder management skills with the ability to collaborate across Technology, Cybersecurity, Risk, Compliance, Internal Audit, and Business functions.
• Experience developing resilience metrics, KPIs/KRIs, governance reporting, and maturity assessments.
• Strong project and program management capabilities, with experience leading cross-functional teams and strategic initiatives.
  

Preferred Qualifications

• Master's degree in Business Administration (MBA), Information Security, Risk Management, Cybersecurity, or a related field.
• Professional certifications such as: CBCI (Certified Business Continuity Institute) MBCI (Member of the Business Continuity Institute) CBCP (Certified Business Continuity Professional) ISO 22301 Lead Implementer or Lead Auditor ISO 27001 Lead Implementer or Lead Auditor CISSP CISM CRISC PMP ITIL Foundation or higher
• Experience within highly regulated industries such as Financial Services, Banking, Telecommunications, Energy, Aviation, Healthcare, or Government.
• Experience implementing resilience programs aligned with ISO 22301, ISO 27001, NIST, DORA, and other regulatory frameworks.
• Knowledge of cyber recovery technologies, ransomware recovery strategies, backup and recovery solutions, and clean-room recovery environments.
• Experience leading enterprise-wide crisis simulations, tabletop exercises, and operational resilience testing programs.