Cyber Risk Analyst, IT DR Specialist

Stanley Black & Decker, Inc. • Towson, MD

1d • Remote

About The Position

Cyber Risk Analyst – BCP/IT DR Specialist Come make the world and accelerate your success. It takes great people to achieve greatness. People with a sense of purpose and integrity. People with a relentless pursuit of excellence. People who care about making things better For Those Who Make The World™. Sound like you? Join our top-notch team of approximately 48,000 diverse and high-performing professionals globally who are making their mark on some of the world’s most beloved brands, including DEWALT®, BLACK+DECKER®, CRAFTSMAN®, STANLEY®, CUB CADET®, and HUSTLER®. The Job: As a Cyber Risk Analyst – BCP/IT DR Specialist, you’ll be part of our Corporate Cyber Security team working as a remote employee. The Cyber Risk Analyst – BCP/IT DR Specialist is responsible for supporting and enhancing the organization’s Business Continuity Planning (BCP) and IT Disaster Recovery (DR) programs. This role will assess cyber risks, develop and maintain BCP/DR strategies, coordinate testing and exercises, and ensure compliance with regulatory requirements. The specialist will collaborate with cross-functional teams to identify potential threats, evaluate the effectiveness of existing controls, and recommend improvements to minimize business disruption and data loss in the event of a cyber incident or disaster. We want our company to be a place you’ll want to be – and stay. Being part of our team means you’ll get to: Grow: Be part of our global company with 20+ brands to grow and develop your skills along multiple career paths. Learn: Have access to a wealth of learning resources, including our digital learning portal. Belong: Experience an awesome place to work, where we have mutual respect and a great appreciation for a wide range of perspectives and experiences. Give Back: Help us continue to make positive changes locally and globally through volunteerism, giving back, and sustainable business practices. What’s more, you’ll get that pride that comes from empowering makers, doers, protectors, and everyday heroes all over the world. We’re more than the #1 tools company. More than a driving force in outdoor power equipment. More than a global leader in industrial. We’re visionaries and innovators. As successful as we’ve been in the past, we have so much further to go. That’s where you come in. Join us! #LI-NM1 #LI-Remote We Don’t Just Build The World, We Build Innovative Technology Too. Joining the Stanley Black & Decker team means working in an innovative, tech-driven and highly collaborative team environment supported by over 58,000 professionals in 60 countries across the globe. Here, you’ll get the unique chance to impact some of the world’s most iconic brands including STANLEY TOOLS, DEWALT, CRAFTSMAN, MAC TOOLS and Black + Decker. Your ideas and solutions have the potential to reach millions of customers as we work together to write the next chapter in our history. Come build with us and take your career to new heights. Who We Are We’re the World’s largest tool company. We’re industry visionaries. We’re solving problems and advancing the manufacturing trade through innovative technology and our Industry 4.0 Initiative. We are committed to ensuring our state-of-the-art “smart factory” products and services provide greater quality to our customers & greater environmental and social value to our planet.

Requirements

• Strong understanding of BCP/IT DR program management and risk governance.
• Knowledge of risk management frameworks and standards (ISO 27001, NIST).
• Experience with BT and OT environments.
• Minimum 5 years in IT risk management, cybersecurity, or BCP/IT DR.
• Demonstrated experience managing IT DR programs in complex organizations.

Responsibilities

• BCP/IT DR Governance Represent and articulate BCPIT DR risk to the organization, ensuring risks are clearly communicated and understood at all levels.
• Lead the governance of the BCP/IT DR program, focusing on the creation and ongoing documentation of comprehensive plans.
• Define and develop metrics that highlight the programs risks and operational performance for SBD leadership.
• Develop and drive holistic mitigation strategies, collaborating with business units to ensure ownership of mitigation actions that are aligned to overarching governance principles.
• Facilitate the development and execution of risk response tasks, ensuring mitigation efforts across business units are coordinated and governed effectively.
• Establish and maintain governance frameworks that unify business unit approaches to BCP/IT DR, ensuring consistency, scalability, and accountability.
• Cybersecurity & Technology Risk Management Support enhancing the risk management program regarding the planning, documentation, quantification, and response to cybersecurity and technology risks.
• Support risk assessments, policy exception analysis, issue management, risk tolerance definition, and the creation and monitoring of key risk indicators (KRIs).
• Ensure risk response activities are documented, tracked, and aligned with organizational risk tolerance and strategic objectives.
• Drive continuous improvement in risk management practices, promoting a culture of risk awareness and proactive mitigation.
• Investigate and understand the BCP/IT DR capabilities across the organization
• Document BCP/IT DR risks and issues according to the defined risk management framework
• Partner with leadership to determine risk appetite in accordance with BCP/IT DR risks
• Develop, maintain, and enhance the governance process for BCP/IT DR standards, processes, and documentation.
• Partner with business owners to implement and manage BCP/IT DR programs, including testing and continuous improvement.
• Conduct gap analyses and recommend enhancements for BCP/IT DR controls.
• Create and monitor program metrics for operational performance for leadership consumption.
• Create and monitor Key Risk Indicators (KRIs) to track risk exposure.
• Support and oversee the execution of risk assessments.
• Collaborate with embedded risk managers and the Cyber Security Organization to align initiatives and address risks.
• Analyze and execute policy exceptions, ensuring appropriate risk acceptance and mitigation.
• Maintain risk governance documentation, dashboards, and reports.
• Stay informed on emerging risks, regulatory changes, and best practices

Benefits

• You’ll receive a competitive salary and a great benefits plan, including: Medical, dental, life, vision, disability, 401(k), Employee Stock Purchase Plan, paid time off, and tuition reimbursement in addition to programs & benefits in support of your well-being.
• Discounts on Stanley Black & Decker tools and other partner programs.
• You’ll get a competitive salary and a comprehensive benefits plan that includes medical, dental, life, vision, wellness program, disability, retirement benefits, Employee Stock Purchase Plan, Paid Time Off, including paid vacation, holidays & personal days, and tuition reimbursement.
• And, of course, discounts on Stanley Black & Decker tools and products and well as discount programs for many other vendors and partners.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed