Disaster Recovery & Business Continuity Specialist

Brown & Brown Insurance•Plano, TX

5d•Hybrid

About The Position

Brown & Brown Insurance is seeking a detail-oriented, resilience-minded Disaster Recovery & Business Continuity Specialist to own disaster recovery and business continuity planning for the retail business application portfolio. The role ensures critical applications have current, tested recovery plans and that the organization can demonstrate strong disaster recovery, business impact analysis, and IT control compliance to auditors and regulators. The position reports to the Application Support Director and may be performed hybrid or remotely, reporting to any of the company’s 500 offices. Infrequent travel to offices for onsite support, conferences, and meetings may be required, up to approximately 10%.

Requirements

Bachelor’s degree in computer science, information systems, business continuity/emergency management, or equivalent experience.
3–5 years of experience in disaster recovery, business continuity, IT risk/compliance, or application support.
Intermediate knowledge of disaster recovery and business continuity concepts, including Business Impact Analysis, RTO, RPO, and recovery tiering frameworks.
Intermediate knowledge of ServiceNow or comparable GRC/ITSM tooling for tracking disaster recovery plans, exceptions, and compliance.
Intermediate knowledge of Microsoft technologies, including M365, O365, OneDrive, SharePoint, Azure AD, and Power Automate.
Strong analytical and documentation skills, including the ability to translate technical recovery requirements into clear plans and reporting.
Strong written and verbal communication skills, including experience supporting audits or compliance assessments.
Foundational knowledge of the insurance industry.
Foundational knowledge of Agile and Scrum frameworks.
ITIL Foundation certification.

Nice To Haves

Certification in business continuity or disaster recovery, such as CBCP, MBCI, DRCS, or equivalent.
Experience with Archer or another GRC platform for risk and exception management.
Experience facilitating disaster recovery tabletop exercises or full-scale failover testing.
Experience supporting SOX, security, or other regulatory audits related to IT resilience.
Experience with cloud-based disaster recovery/backup solutions and data replication technologies.
Experience working within resilience frameworks such as NIST, ISO 22301, COBIT, or FFIEC guidance.

Responsibilities

Own and maintain disaster recovery planning for the retail application portfolio, ensuring Application/Disaster Recovery Plans exist for every application designated as critical to Brown & Brown’s operations.
Conduct and maintain Business Impact Analyses for retail business applications, validate findings with business partners, and use BIA ratings to define and validate RTO, RPO, and criticality requirements.
Maintain application tiering in accordance with disaster recovery and backup policies, ensuring recovery capabilities, backup cadence, and testing align with each application’s assigned tier.
Coordinate and execute annual disaster recovery exercises, document results, validate RTO/RPO achievement, and drive remediation when targets are not met.
Partner with Application Support, Infrastructure, and Security teams to build, test, and maintain backup, replication, and recovery procedures for critical systems.
Own disaster recovery compliance and audit readiness, supporting Control Self-Assessments, internal and external audits, and Archer-based exception requests and tracking.
Represent business continuity and operational resilience from a technical perspective.
Develop, govern, and continuously improve Application Disaster Recovery Plan documentation as business and technology requirements change.
Partner with Application Portfolio Management and Application Support leadership to identify and prioritize resilience gaps and track remediation through governance forums.
Support new application onboarding by confirming disaster recovery requirements, resilience classification, and recovery documentation are established before go-live.
Develop and present executive-level reporting on application resilience, recovery readiness, compliance status, testing results, and emerging risks.
Serve as the subject matter expert on disaster recovery policy, standards, and terminology, providing guidance to application owners and support teams.
Monitor regulatory, audit, and industry requirements related to disaster recovery to keep practices current and compliant.
Champion information security best practices by educating customers and following audit, regulatory, and compliance information security policies and procedures.
Travel infrequently to offices for onsite support, conferences, and meetings, up to approximately 10%.