Business Continuity, Incident Management & Internal Audit Manager

BILL

10d•$111,400 - $164,300•Remote

About The Position

BILL is seeking a Manager to lead its resilience program and contribute to the internal audit team. The role runs the Business Continuity Management (BCM) program, owns critical incident management and crisis response, and contributes to risk-based internal audit engagements. The position partners across business functions, Cloud Infrastructure, InfoSec, and senior leadership to strengthen continuity, response, and risk oversight.

Requirements

5 to 7 years of experience in business continuity, incident management, or crisis management.
At least 2 years leading BCM programs.
At least 2 years of internal audit experience.
Hands-on experience with BCM, business impact analyses, recovery planning, incident response, and audit methodology—including risk assessment, audit planning, control testing, and reporting—for a FinTech, Payments, and/or Software company; described as non-negotiable.
Familiarity with BCM, risk management, and internal audit frameworks.
Experience with, or a strong desire to incorporate, AI capabilities into processes.
Strong writing and presentation skills, including the ability to brief executives clearly during pressure situations.
Ability to provide credible challenge at all levels of the organization.
Bachelor's degree in business, accounting, information systems, or a similar field.
Authorization to work in the United States without requiring visa sponsorship now or in the future; the position is not eligible for visa sponsorship.

Nice To Haves

CIA, CISA, CRISC, CBCP/MBCP, CISSP, or CPA certification.

Responsibilities

Lead the enterprise BCM program, including policies, standards, playbooks, business impact analyses, recovery strategies, and annual plan reviews.
Report BCM program status, gaps, and remediation progress to business and functional BCM leads and senior leadership.
Plan and run tabletop exercises and recovery tests with business functions, Cloud Infrastructure, and InfoSec partners; use or develop internal AI tools to track findings through closure.
Align business continuity with Disaster Recovery and Crisis Management, maintaining consistent recovery objectives and dependencies.
Own the critical incident management process, including severity definitions, escalation paths, communications, and on-call roles.
Coordinate responses to major disruptions and lead post-incident reviews that establish root causes, owners, and due dates.
Maintain incident metrics and trend reporting on recurring risks and corrective-action status.
Use or develop internal AI capabilities for continuous monitoring and incident-awareness notifications and communications.
Execute the risk-based internal audit plan, including operational, financial, technology, compliance, and third-party reviews.
Plan and lead audits, including scoping, risk and control matrices, TOD/TOE testing, workpapers, and clear, evidence-based reports; use internal AI tools for testing, reporting, and continuous monitoring where appropriate.
Track management action plans, validate remediation, and report open issues to leadership.
Maintain independence safeguards between audit work and the BCM and incident response functions operated by the role.
Build credibility, trust, and working relationships with business partners.

Benefits

Medical, dental, and vision insurance; employee health plans are 100% paid, with HMO, PPO, or HDHP options.
HSA and FSA accounts.
Life insurance and long- and short-term disability coverage.
Employee Assistance Program (EAP).
11 or more observed holidays and wellness days.
Flexible time off and paid time off.
Employee Stock Purchase Program with employee discounts.
Wellness and fitness initiatives.
Employee recognition and referral programs.
401(k) retirement plan.
Other company benefits.