We have partnered with our client in their search for a BC/ DR Lead Program manager to work remotely.
Responsibilities
The Program Manager partners across Technology (including IT Infrastructure & Operations and Enterprise
Applications), Information Security, Retail Operations, Production, Medical States Operations,
Construction/New Builds, Marketing, Finance and Accounting (including SOX, and Internal Audit), Legal and
Compliance, Human Resources, Physical Security, and third parties. The role translates business and
regulatory requirements into practical resilience controls, recovery priorities, executive decisions, and
accountable remediation plans.
- Lead the enterprise BC/DR and operational resilience program, including strategy, governance,
roadmap, policies, standards, procedures, templates, and annual program objectives.
. Own the business impact analysis and continuity risk assessment lifecycle; identify critical
processes, technology dependencies, data, facilities, personnel, vendors, and recovery
requirements.
- Establish and maintain recovery time objectives (RTOs), recovery point objectives (RPOs), maximum
tolerable downtime, minimum business continuity objectives, and service restoration priorities with
accountable owners.
- Direct development, maintenance, review, and approval of business continuity plans, IT disaster
recovery plans, crisis-management playbooks, communications plans, and manual workarounds.
- Plan and lead tabletop exercises, technical recovery tests, failover/failback tests, call-tree
exercises, and enterprise simulations; document results, lessons learned, corrective actions,
owners, and due dates.
- Provide program reporting to leadership through resilience dashboards, key risk indicators, test
results, plan currency, open gaps, exception status, remediation progress, and material risk
escalations.
- Coordinate BC/DR response during disruptive events and support incident command, crisis
management, stakeholder communications, business restoration, and post-event review.
- Partner with Infrastructure, Cloud, Application, Security, and business teams to validate backup,
replication, redundancy, restoration, alternate processing, and cyber-recovery capabilities.
- Assess third-party continuity and disaster recovery capabilities for critical services and ensure
resilience requirements are incorporated into due diligence, contracts, monitoring, and exit
planning.
- Manage program priorities, resources, vendors, budget inputs, and project plans; provide direction
and coaching to assigned staff or matrixed contributors.
- Drive program maturity through benchmarking, automation, documentation quality, training,
metrics, audit readiness, and risk-based continuous improvement.
- Align BC/DR governance and evidence with applicable security, resilience, and risk frameworks,
including ISO 22301, ISO/IEC 27001, NIST SP 800-34, NIST Cybersecurity Framework, NIST SP 800-
53, NIST SP 800-30, ISO 31000, COSO ERM, and BCI Good Practice Guidelines.
- Support control design, evidence collection, testing, remediation, and audit readiness for SOC 2
Type II, Sarbanes-Oxley (SOX), HIPAA, PCI DSS, and other applicable legal, regulatory, contractual,
and internal control requirements.
- Ensure continuity and recovery plans address regulated and sensitive data, including recovery
sequencing, access control, backup protection, encryption, alternate processing, logging, evidence
retention, and emergency access.
- Partner with Information Security and Incident Response to integrate cyber incident, ransomware,
destructive attack, identity compromise, data loss, and technology outage scenarios into recovery
planning and exercises.
- Track control deficiencies, test findings, audit observations, risk acceptances, exceptions, and
corrective action plans through closure; escalate overdue or material risks to leadership.
- Chair or facilitate BC/DR governance forums and maintain clear accountability across plan owners,
technology owners, executives, crisis leaders, and third parties.
- Advise senior leaders on resilience risk, investment priorities, recovery tradeoffs, test outcomes, and
readiness decisions using concise business-focused reporting.
- Develop and deliver role-based training and awareness for plan owners, recovery teams, crisis
leaders, technology teams, and employees.
- Build effective partnerships across geographically distributed and cross-functional teams; influence
outcomes without relying solely on direct authority.
- Maintain current inventories of critical services, plans, dependencies, recovery resources, contacts,
and evidence in approved systems of record.
Skills Required
- Demonstrated experience leading business impact analyses, continuity risk assessments, recovery
strategy development, plan governance, exercises, and corrective-action programs.
- Experience with enterprise technology recovery, including cloud and on-premises infrastructure,
applications, data, networks, identity services, backups, replication, and third-party dependencies.
- Working knowledge of ISO 22301, ISO/IEC 27001, NIST SP 800-34, NIST CSF, and related business
continuity, security, and risk management frameworks.
- Experience supporting audits or compliance activities involving SOC 2 Type II, SOX, HIPAA, and PCI
DSS.
- Strong leadership, program management, analytical, facilitation, decision-making, executive
communication, and business writing skills.
- Ability to manage multiple priorities, lead under pressure, exercise sound judgment, and support
incidents outside standard business hours when required.
- Proficiency with Microsoft 365 applications and experience with governance, risk, compliance,
continuity planning, emergency notification, or project-management platforms.
- Preferred: Professional certification such as CBCP, MBCI, CBRM, ISO 22301 Lead Implementer or
Lead Auditor, CRISC, CISM, CISSP, or PMP.
- Preferred: Experience in a regulated, multi-site, retail, healthcare, manufacturing, or highly
distributed operating environment.
- Preferred: Experience with cyber-recovery, ransomware resilience, cloud disaster recovery, third party
resilience, and executive crisis simulations
- Preferred: Experience preparing executive dashboards, audit evidence, risk acceptances, budget
requests, and program maturity assessments.
Education & Work Experience
- Bachelor's degree in Business Continuity, Information Technology, Cybersecurity, Risk
Management, Business Administration, or a related field, or equivalent professional experience.
- Seven or more years of progressive experience in business continuity, disaster recovery, operational
resilience, crisis management, technology risk, or a related discipline.
- Three or more years leading enterprise programs, complex cross-functional initiatives, or
professional staff in a manager, program lead, or equivalent capacity.
Title BC/DR Program Manager
Location 100% remote working EST
Client Industry Healthcare
Compensation $60-65/ hr
Ref ID
About Korn Ferry
Korn Ferry unleashes potential in people, teams, and organizations. We work with our clients to design optimal organization structures, roles, and responsibilities. We help them hire the right people and advise them on how to reward and motivate their workforce while developing professionals as they navigate and advance their careers. To learn more, please visit Korn Ferry at www.Kornferry.com
