Business Resilience Engineer

Regions•Hoover, AL

5d•$127,786 - $159,760•Remote

About The Position

At Regions, the Business Resilience Engineer helps the organization prepare and adapt to business disruptions from cyber threats to natural disasters, while maintaining critical bank operations, and safeguarding people, processes, and tools. Assists with the design and implementation of resilience strategies that improve the organization's ability to evolve, anticipate, withstand, and recover from cyber-attacks or other disruptions that impact critical business operations. Supports high-profile incident response and recovery activities for business or technology disruptions, including those cause by cyber-attacks, natural disaster, man-made disaster, and other crises scenarios. Takes direction and works closely with the Business Resilience manager to support the collaboration and testing of business process resilience plans. Drives the team’s analyses and testing of Information Technology’s response and recovery activities for technology disruptions.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related technical/business field and ten (10) years of experience in Business Continuity, Disaster Recovery, Incident Management/Response, Cyber Security, IT Risk Management, IT Audit or a combination of other directly related experience
Or High School Diploma or GED and fourteen (14) years of experience in Business Continuity, Disaster Recovery, Incident Management/Response, Cyber Security, IT Risk Management, IT Audit or a combination of other directly related experience

Nice To Haves

Relevant Certification strongly preferred: Certified Business Continuity Professional (CBCP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM)
Experience in performing business impact analyses, cyber risk assessments, advanced recovery strategies and developing resiliency documentation
Experience with light automation and reporting tools (e.g. SharePoint, JIRA, Power BI, Tableau, etc.)
Hands-on experience with business continuity and/or operational resilience technology platforms, including ServiceNow Business Continuity Management (BCM) with experience leveraging workflow, reporting, metrics, and platform capabilities to improve program effectiveness and maturity.
Demonstrated experience leading Business Continuity capabilities and teams including oversight and execution of Business Impact Analyses (BIAs), Business Continuity Plans (BCPs), plan maintenance, exercises/testing, and remediation of identified gaps.
Proven experience designing and facilitating tabletop exercises, with the ability to develop realistic, engaging scenarios that validate recovery strategies, plans, roles, and decision making with business stakeholders.
Strong understanding of Business Continuity and Operational Resilience frameworks and principles, with experience evolving continuity practices toward a more integrated, risk based operational resilience model, including identification of critical business services, dependencies, and resilience requirements.
Working knowledge of the intersection between Business Continuity, Disaster Recovery, Crisis Management, Third Party Resilience and Cyber Incident Response, including how disruptions trigger business continuity activation and response procedures; familiarity with relevant industry standards and guidance such as NIST is preferred. (e.g., NIST SP 800-34, NIST Cybersecurity Framework)

Responsibilities

Leads the enhancement of the Business Impact Analysis (BIA) methodology and leads BIA sessions with business units throughout the company to help the organization prepare and adapt to business disruptions, including cyber security
Partners with business process and technology owners to develop advanced cyber recovery strategies along with traditional strategies; test these strategies and technology recovery capabilities
Identifies Business Units’ process interdependencies (between processes, data, and applications) and determines Regions’ critical path
Plans, coordinates, and administers resilience exercises with business leaders to ensure soundness of operational and cyber resilience.
Develops and updates process maps for resiliency management activities that reflect the department’s efforts to identify, protect, detect, respond, and recover from potential cyber threats and maintain situational awareness
Ensures all frameworks, processes, procedures, and exercise methods meet or exceed regulations established by the FFIEC
Develops communications including proposals, reports, presentations, and procedures (including recommendations) to all levels of management
Develops and maintains detailed measurements on business resiliency, readiness, crisis, and incident reporting
Develops comprehensive reporting including scheduling, tracking, and reporting on resiliency and the evaluation of test deficiencies and development of follow-up action plans
Researches and remains current on the latest business resilience trends and assess applicability to Regions Bank
Collaborates with management to ensure that team technical knowledge or skills gaps are addressed, and effective training procedures are developed
Offers advice and guidance to junior engineers as a subject-matter expert
Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices