Business Continuity and Incident Management Program Manager

Merchants Bonding Company•West Des Moines, IA

1d•Onsite

About The Position

The Business Continuity & Incident Management Program Manager leads the execution and continuous improvement of the Merchant’s enterprise business continuity, incident management, and emergency response programs. This role is responsible for coordinating cross-functional resilience initiatives, facilitating enterprise response activities, and enhancing program maturity in alignment with business priorities and regulatory and industry standards. This role also supports broader enterprise risk management activities, including third-party risk management and Company insurance programs.

Requirements

Bachelor’s degree in business administration, risk management, information technology, emergency management, or related field.
Minimum 7 years of experience in business continuity management or related field.

Nice To Haves

Professional certification in business continuity (ABCP, CBCP, CBRM, etc.).
Experience in the insurance or financial services industry.

Responsibilities

Lead enterprise-wide business impact analyses (BIAs) to identify critical processes, recovery time objectives (RTOs), and recovery point objectives (RPOs).
Develop, maintain, and enhance departmental and enterprise business continuity plans and emergency response procedures in alignment with industry standards and regulatory expectations.
Conducts cross-functional planning sessions to validate operational dependencies, staffing models, and recovery strategies.
Ensure continuity of documentation that is accurate, current, and auditable to support regulatory examinations and internal audits.
Coordinate enterprise incident and emergency response activities during workplace emergencies, operational disruptions, or other material risk events.
Manage incident classification, escalation protocols, and communication processes.
Prepare executive-level situation reports and briefings outlining impacts, mitigation steps, and recovery timelines.
Lead post-incident reviews, document root cause analyses, and track corrective actions to closure.
Design and facilitate enterprise tabletop and functional exercises to validate continuity and response capabilities.
Evaluate exercise results, identify control gaps, and implement measurable improvements.
Partner with Third Party Risk Management (TPRM) and Information Technology to assess third-party continuity and disaster recovery capabilities and contract requirements.
Partner with TPRM with procuring, evaluating, and mitigating third-party risks through due diligence and contract reviews.
Support corporate insurance renewals, coverage analysis, exposure data collection, and policy documentation.