Business Resilience Engineer

Regions Bank•Hoover, AL

1d•Remote

About The Position

At Regions, the Business Resilience Engineer helps the organization prepare for and adapt to business disruptions, including cyber threats and natural disasters, while maintaining critical bank operations and safeguarding people, processes, and tools. The role assists with designing and implementing resilience strategies to improve the organization’s ability to evolve, anticipate, withstand, and recover from cyberattacks and other disruptions affecting critical operations. It supports high-profile incident response and recovery activities and works under the direction of the Business Resilience Manager to collaborate on and test business process resilience plans. The role also analyzes and tests Information Technology’s response and recovery activities for technology disruptions. The position is currently offsite. Associates primarily work from home and may be expected to attend meetings or other events onsite as needed. The position is preferably located near a Regions office in Birmingham, Alabama; Charlotte, North Carolina; or Atlanta, Georgia. Regions will not sponsor work visas for this position; applicants must be authorized to work full time in the United States. The role is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime. The position may participate in an annual discretionary bonus plan.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related technical/business field and 10 years of experience in Business Continuity, Disaster Recovery, Incident Management/Response, Cyber Security, IT Risk Management, IT Audit, or a combination of directly related experience; alternatively, a high school diploma or GED and 14 years of such experience.
Ability to develop and maintain relationships with employees at all levels.
Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance.
Strong analytical, critical-thinking, problem-resolution, and decision-making skills.
Strong influencing skills and ability to advance the Business Resilience agenda.
Strong interpersonal, written, and verbal communication skills.
Strong process and project management skills, with the ability to improve process efficiency and effectiveness.
Must currently be authorized to work in the United States on a full-time basis; Regions will not sponsor work visas for this position.

Nice To Haves

Relevant certification strongly preferred: Certified Business Continuity Professional (CBCP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM).
Experience performing business impact analyses, cyber risk assessments, advanced recovery strategies, and developing resiliency documentation.
Experience with light automation and reporting tools such as SharePoint, JIRA, Power BI, or Tableau.
Hands-on experience with business continuity and/or operational resilience technology platforms, including ServiceNow Business Continuity Management (BCM), and using workflow, reporting, metrics, and platform capabilities to improve program effectiveness and maturity.
Demonstrated experience leading Business Continuity capabilities and teams, including oversight and execution of BIAs, Business Continuity Plans (BCPs), plan maintenance, exercises and testing, and remediation of identified gaps.
Experience designing and facilitating tabletop exercises and developing realistic scenarios to validate recovery strategies, plans, roles, and decision-making with business stakeholders.
Strong understanding of Business Continuity and Operational Resilience frameworks and principles, including evolving continuity practices toward an integrated, risk-based operational resilience model and identifying critical business services, dependencies, and resilience requirements.
Working knowledge of the intersections between Business Continuity, Disaster Recovery, Crisis Management, Third Party Resilience, and Cyber Incident Response, including how disruptions trigger continuity activation and response procedures.
Familiarity with relevant industry standards and guidance such as NIST SP 800-34 and the NIST Cybersecurity Framework is preferred.
Preferably located near a Regions office in Birmingham, Alabama; Charlotte, North Carolina; or Atlanta, Georgia.

Responsibilities

Lead enhancement of the Business Impact Analysis (BIA) methodology and lead BIA sessions with business units to help prepare for and adapt to disruptions, including cybersecurity events.
Partner with business process and technology owners to develop and test advanced cyber recovery strategies, traditional recovery strategies, and technology recovery capabilities.
Identify interdependencies between business processes, data, and applications, and determine the organization’s critical path.
Plan, coordinate, and administer resilience exercises with business leaders to assess operational and cyber resilience.
Develop and update process maps for resilience management activities, including efforts to identify, protect, detect, respond to, and recover from cyber threats and maintain situational awareness.
Ensure frameworks, processes, procedures, and exercise methods meet or exceed FFIEC regulations.
Develop proposals, reports, presentations, procedures, and recommendations for all levels of management.
Develop and maintain detailed measurements of business resilience, readiness, crises, and incident reporting.
Schedule, track, and report on resilience activities; evaluate test deficiencies and develop follow-up action plans.
Research business resilience trends and assess their applicability to Regions Bank.
Collaborate with management to identify team technical knowledge or skills gaps and develop effective training procedures.
Provide advice and guidance to junior engineers as a subject-matter expert.
Ensure compliance with risk management programs, rules, regulations, and cybersecurity practices; identify and support process improvements; and apply disciplined change management practices.