Manager Cyber & Business Resilience

BlueCross BlueShield of Tennessee•Chattanooga, TN

6d•Remote

About The Position

We are hiring a Manager, Cyber & Business Resilience. In this role, you will lead the enterprise Business and Cyber Resilience program—helping the organization modernize from traditional disaster recovery planning (e.g., weather and facility disruptions) to cyber-resilient recovery models built for today’s threat landscape (e.g., ransomware and destructive cyber events). You’ll direct the end-to-end resilience lifecycle, including cyber-informed Business Impact Analyses (BIAs), risk assessments, recovery strategy development, and resilience testing across on-premises, cloud, and hybrid environments. You’ll partner closely with infrastructure, application, and cybersecurity teams to assess recovery readiness, strengthen secure restoration capabilities, and ensure critical services can be recovered safely and quickly when it matters most. To be successful in this role, you’ll bring deep IT experience and a strong cybersecurity foundation. You can translate cyber risk into practical recovery actions (including confidence in how systems, servers, and data are protected) and guide teams through a coordinated, repeatable recovery process. Prior experience leading teams and enterprise-scale initiatives is a must. You will be a strong candidate for this role if you have experience evolving business continuity/disaster recovery programs toward cyber-resilience, leading tabletop and technical recovery exercises, and building clear, actionable standards and plans that business and technical teams can follow. Because this role partners with external stakeholders (including vendors and government partners), strong executive presence and clear communication—written and verbal—are essential. Note: · Sponsorship is not available for this role. · While this is a fully remote role, the final round of interviews will occur onsite in our Chattanooga, TN office.

Requirements

Bachelor's degree in business, information systems, cybersecurity, computer science, or relevant field or equivalent work experience required. (Equivalent years of experience are determined as one year of technical experience for every year of college requested.)
7 years of experience in an Information Technology role required
3 years of experience in an IT management or leadership required
Business continuity or related professional certification required (DRII, BCI, BRCCI, IAEM, or related certification)
Ability to encourage and promote cooperation, understanding, trust and credibility.
Strong understanding of interrelationships between business functions, system and network infrastructure, data communications, database technology, and application recovery.
Solid understanding of Information Technology, Information Security, and Cyber Resilience.
Detail-oriented with strong problem-solving and analytical orientation.
Proven ability to direct enterprise-scale projects.
Excellent verbal and written communication skills, including the ability to effectively communicate complex and technical issues to a diverse audience with clarity and conciseness.
Strong vendor management practices and partner relationship building skills.
Demonstrated knowledge and experience with driving optimal results through data-driven decision making.

Nice To Haves

experience evolving business continuity/disaster recovery programs toward cyber-resilience
leading tabletop and technical recovery exercises
building clear, actionable standards and plans that business and technical teams can follow
strong executive presence and clear communication—written and verbal

Responsibilities

Lead the enterprise Business and Cyber Resilience program, shifting from legacy DR/BC approaches to cyber-resilient recovery models.
Direct the end-to-end resilience lifecycle, including cyber-informed Business Impact Analysis (BIA), risk assessment, recovery strategy development, and testing.
Manage the existing BIA process with business units to identify critical processes, system dependencies, and recovery objectives (RTO/RPO).
Maintain and evolve cyber business continuity and disaster recovery plans across on-premises, cloud, and hybrid environments.
Partner with business owners, infrastructure, application, and cybersecurity teams to assess recovery readiness, data protection, and secure restoration capabilities.
Develop and execute strategies to enhance business and cyber resilience, including recoverability from ransomware and other destructive cyber events.
Establish and enforce resilience-related policies, standards, and best practices aligned with governance and regulatory expectations.
Promote enterprise awareness of how cyber risk impacts business operations, continuity, and recovery outcomes.
Plan and lead cyber resilience exercises, including disaster recovery tests and cyber disruption tabletop scenarios, to drive continuous improvement.
Participate in an on-call rotation to support coordinated recovery and business resumption activities during major disruptions.