Senior Segment Risk Manager – Business Continuity, Resiliency

Role Overview

• Leads operational risk oversight while owning the design and execution of business continuity, disaster recovery, and resiliency programs for a major business segment.
• Oversight of operational and regulatory risk management programs for a major business segment.
• Evaluate effectiveness of internal controls and risk mitigation strategies.
• Direct self-monitoring, testing, and Risk & Control Self-Assessments (RCSA) in alignment with Corporate Risk requirements.
• Ensure adherence to corporate policies, procedures, and regulatory expectations.
• Serve as the central point of coordination between business segment, Corporate Risk, and Audit.
• Escalate significant risks, control gaps, and issues to senior leadership in a timely manner.
• Partner with business leaders to align risk management activities with strategic objectives.
• Lead remediation efforts, including action planning, ownership, and tracking to resolution.
• Develop and maintain Business Continuity Plans (BCPs) and conduct Business Impact Analyses (BIA).
• Coordinate with IT and stakeholders to align disaster recovery strategies and recovery objectives (RTO/RPO).
• Lead crisis management response and incident coordination during business disruptions.
• Design and execute continuity testing, training, and post-incident improvement activities.

Requirements

• Bachelor’s degree
• Minimum of 7 years of experience in Audit, Compliance, Risk Management or Operational Risk.
• In lieu of a Bachelor’s degree 4 additional years of segment-specific or risk related experience may be considered
• 7+ years of experience in operational risk, enterprise risk, or related discipline
• Experience in a regulated industry preferred
• Prior leadership or people management experience
• Experience building or managing Business Continuity and Disaster Recovery programs
• Knowledge of operational resiliency frameworks and industry standards (ISO 22301, NIST, FFIEC)
• Familiarity with crisis management structures and incident command protocols
• Experience conducting Business Impact Analyses and scenario planning exercises
• Understanding of third-party/vendor continuity risk management
• Ability to define and track recovery metrics (RTO, RPO)
• Experience facilitating tabletop exercises and resilience simulations
• Strong executive communication and crisis leadership capability
• Ability to influence across business, technology, and risk functions
• Relevant certifications (CBCP, MBCP, CRISC, CISM, or similar)

Benefits

• Flexible work arrangement
• Equal Opportunity Employer
• Tobacco-Free Hiring Practice