Business Resilience Engineer

Regions Bank•Atlanta, GA

2d•Remote

About The Position

The Business Resilience Engineer helps Regions prepare for and adapt to disruptions—including cyber threats, natural disasters, and other crises—while maintaining critical bank operations and safeguarding people, processes, and tools. The role assists in designing and implementing resilience strategies to help the organization anticipate, withstand, and recover from disruptions affecting critical business operations. It supports high-profile incident response and recovery activities and works under the direction of the Business Resilience Manager to collaborate on and test business process resilience plans. The position also drives analysis and testing of Information Technology response and recovery activities for technology disruptions. The position is currently offsite. Associates primarily work from home and may be expected to attend meetings or other events onsite as needed. The posting preferably seeks associates located near a Regions office in Birmingham, Alabama; Charlotte, North Carolina; or Atlanta, Georgia. The listed location is the Riverchase Operations Center in Hoover, Alabama. Regions does not sponsor work visas for this position; applicants must already be authorized to work in the United States on a full-time basis. This is an exempt position under the Fair Labor Standards Act and is not eligible for overtime pay. It may participate in an annual discretionary bonus plan. Compensation ranges are described as job- and location-specific, but no salary figures are provided.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related technical or business field, plus 10 years of experience in Business Continuity, Disaster Recovery, Incident Management/Response, Cyber Security, IT Risk Management, IT Audit, or a combination of directly related experience; or a high school diploma or GED plus 14 years of such experience.
Ability to develop and maintain relationships with employees at all levels.
Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance.
Strong analytical, critical-thinking, problem-resolution, and decision-making skills.
Strong influencing skills and ability to advance the Business Resilience agenda.
Strong interpersonal, written, and verbal communication skills.
Strong process and project management skills, with the ability to improve process efficiency and effectiveness.

Nice To Haves

Relevant certification strongly preferred: Certified Business Continuity Professional (CBCP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM).
Experience performing business impact analyses, cyber risk assessments, advanced recovery strategies, and developing resilience documentation.
Experience with light automation and reporting tools such as SharePoint, JIRA, Power BI, or Tableau.
Hands-on experience with business continuity or operational resilience technology platforms, including ServiceNow Business Continuity Management (BCM), and using workflow, reporting, metrics, and platform capabilities to improve program effectiveness and maturity.
Demonstrated experience leading Business Continuity capabilities and teams, including oversight and execution of BIAs, Business Continuity Plans (BCPs), plan maintenance, exercises and testing, and remediation of identified gaps.
Experience designing and facilitating tabletop exercises, including developing realistic scenarios to validate recovery strategies, plans, roles, and decision-making with business stakeholders.
Strong understanding of Business Continuity and Operational Resilience frameworks and principles, and experience evolving continuity practices toward an integrated, risk-based operational resilience model that identifies critical business services, dependencies, and resilience requirements.
Working knowledge of the intersection of Business Continuity, Disaster Recovery, Crisis Management, Third Party Resilience, and Cyber Incident Response, including how disruptions trigger continuity activation and response procedures; familiarity with industry guidance such as NIST SP 800-34 and the NIST Cybersecurity Framework is preferred.

Responsibilities

Lead enhancement of the Business Impact Analysis (BIA) methodology and lead BIA sessions with business units to help prepare for and adapt to disruptions, including cybersecurity events.
Partner with business process and technology owners to develop and test advanced cyber recovery strategies, traditional recovery strategies, and technology recovery capabilities.
Identify interdependencies among business-unit processes, data, and applications, and determine the organization's critical path.
Plan, coordinate, and administer resilience exercises with business leaders to assess operational and cyber resilience.
Develop and update process maps for resilience management activities, including efforts to identify, protect, detect, respond to, and recover from cyber threats and maintain situational awareness.
Ensure frameworks, processes, procedures, and exercise methods meet or exceed FFIEC regulations.
Develop communications for all levels of management, including proposals, reports, presentations, and procedures with recommendations.
Develop and maintain detailed measurements relating to business resilience, readiness, crises, and incident reporting.
Develop reporting processes, including scheduling, tracking, reporting on resilience, evaluating test deficiencies, and developing follow-up action plans.
Research current business resilience trends and assess their applicability to Regions Bank.
Collaborate with management to address team technical knowledge or skills gaps and develop effective training procedures.
Advise and guide junior engineers as a subject-matter expert.
Ensure compliance with risk management programs, rules, regulations, and cybersecurity practices; identify and support process improvements; and apply disciplined change management practices.