Operational Resilience Analyst

City National Bank of Florida•Coral Gables, FL

About The Position

The Operational Resilience Analyst supports the Bank’s ability to prepare for, withstand, respond to, and recover from disruptions affecting critical business processes and services. The role carries assigned business continuity and operational resilience activities through completion with limited supervision, provides backup coverage for routine program activities, and escalates issues requiring leadership approval or risk decisions. It does not assume management approval authority. The analyst supports business impact analyses, continuity planning, dependency analysis, exercises, disaster recovery test coordination, crisis readiness, ServiceNow BCM data stewardship, third-party continuity reviews, issue tracking, regulatory evidence gathering, and management reporting. The role also contributes to maintaining program standards, procedures, methodologies, calendars, templates, training materials, and awareness communications, and identifies practical process improvements while preserving approved governance and decision rights.

Requirements

2–4 years of relevant professional experience in business continuity, operational resilience, crisis management, emergency management, operational risk, technology risk, or a closely related discipline within financial services or another highly regulated industry, including practical exposure to BIAs and continuity plans.
Working knowledge of continuity and resilience concepts, including recovery objectives, critical processes and services, dependencies, recovery strategies, exercises, crisis readiness, and issue remediation.
Working knowledge of technology dependencies, CMDB/service mapping, disaster recovery, cyber resilience, cloud/shared responsibility, data backup, and third-party recovery.
Working knowledge of audit and regulatory examination processes and control evidence requirements.
Working knowledge of ServiceNow BCM and BCM/GRC platforms.
Strong written communication, meeting facilitation, time management, organizational, and analytical skills.
Ability to organize complex information, facilitate stakeholder discussions, request evidence, identify inconsistencies, document findings, and carry assigned work through completion.
Ability to use Microsoft 365 and a BCM/GRC platform to complete assigned work.
Ability to respond to major disruptions and time-sensitive projects, including working extended hours when needed and reporting to authorized Bank recovery sites or other designated locations.
Bachelor’s degree in business continuity, emergency management, risk management, business administration, finance, operations, information systems, cybersecurity, or a related field, or an equivalent combination of education and/or relevant professional experience in lieu of a degree.

Nice To Haves

ABCP — Associate Business Continuity Professional certification.
CBCI — Certificate of the Business Continuity Institute.
CBCP — Certified Business Continuity Professional certification.

Responsibilities

Perform assigned business continuity and operational resilience workstreams through completion, including scheduling, stakeholder follow-up, action tracking, evidence collection, and escalation of overdue or unresolved matters.
Provide backup coverage for routine program activities, represent the function in assigned meetings, and maintain accurate status reporting without assuming management approval authority.
Facilitate, document, and quality-review business impact analyses with business units, covering impacts over time, criticality, dependencies, recovery priorities, RTO, RPO, MTPOD, and recovery tiers, subject to accountable owner and Program Lead approval.
Assist process owners in developing and maintaining business continuity plans, recovery strategies, manual workarounds, staffing requirements, alternate workplace arrangements, communication procedures, and return-to-normal steps.
Identify and document dependencies across business processes, applications, data, personnel, facilities, utilities, telecommunications, and third parties; reconcile inconsistencies and escalate unsupported assumptions or recovery gaps.
Coordinate business participation in disaster recovery tests, tabletop and notification exercises, recovery-site activities, sector exercises, and retesting.
Develop or support exercise scenarios, scripts, objectives, participant materials, validation criteria, surveys, and after-action reports.
Compare exercise and test results with business recovery requirements, document exceptions and lessons learned, and track corrective actions and retesting through closure. Technology teams retain technical recovery ownership.
Maintain assigned crisis-management and continuity activation materials, escalation contacts, notification templates, call trees, decision logs, and situation-reporting tools.
Monitor assigned severe-weather and disruption indicators and support business impact assessment, continuity coordination, recovery status reporting, and event documentation during activations or exercises.
Maintain assigned readiness information for essential personnel, alternate work, recovery sites, communications, transportation, and lodging.
Support third-party business continuity and disaster recovery reviews by collecting and reviewing continuity evidence, recovery commitments, test information, and known dependencies using the Bank’s approved methodology.
Coordinate with TPRM, relationship owners, business owners, and the Technology Resiliency Engineer when vendor recovery commitments, technical dependencies, or concentration exposures do not align with business requirements.
Maintain accurate BIA, BCP, dependency, exercise, event, evidence, and issue records in ServiceNow BCM and other approved systems; perform data-quality checks and support user guidance and functional testing.
Prepare management reports and dashboards covering plan status, testing, exceptions, action aging, recovery readiness, and data quality.
Support internal and external audits, regulatory examinations, RCSA activities, and self-identified issues by gathering evidence and drafting factual responses for management review.
Assist with maintaining BCM standards, procedures, methodologies, calendars, templates, document registers, training materials, and awareness communications.
Identify practical improvements to program workflow, data quality, stakeholder guidance, automation, and reporting while preserving approved governance and decision rights.