Operational Resilience Analyst

City National Bank of Florida•Coral Gables, FL

About The Position

The Operational Resilience Analyst supports the Bank's ability to prepare for, withstand, respond to, and recover from disruptions affecting critical business processes and services. The role executes assigned business continuity and operational resilience activities, including business impact analyses, continuity planning, recovery strategies, dependency analysis, exercises and disaster recovery test coordination, crisis readiness, ServiceNow BCM data stewardship, third-party continuity support, issue tracking, regulatory evidence, and management reporting. The analyst carries assigned work through completion with limited supervision, serves as backup coverage for routine program activities, and escalates matters requiring leadership approval or risk decisions. The analyst facilitates and reviews business impact analyses, supports business continuity plans and recovery strategies, documents cross-functional and technology dependencies, and coordinates exercises and recovery validation. The role also maintains assigned crisis-readiness materials, supports disruption response, contributes to third-party continuity reviews, and maintains records and reports in ServiceNow BCM and other approved systems. The analyst assists with audit, regulatory, governance, and continuous-improvement activities while respecting established approval authority and technology teams' ownership of technical recovery.

Requirements

2–4 years of relevant professional experience in business continuity, operational resilience, crisis management, emergency management, operational risk, technology risk, or a closely related discipline within financial services or another highly regulated industry, including practical exposure to BIAs and continuity plans.
Working knowledge of continuity and resilience concepts, including recovery objectives, critical processes and services, dependencies, recovery strategies, exercises, crisis readiness, and issue remediation.
Working knowledge of technology dependencies, CMDB/service mapping, disaster recovery, cyber resilience, cloud/shared responsibility, data backup, and third-party recovery.
Working knowledge of audit and regulatory examination processes and control evidence requirements.
Working knowledge of ServiceNow BCM and BCM/GRC platforms.
Strong written communication, meeting facilitation, time management, organizational, and analytical skills.
Ability to organize complex information, facilitate stakeholder discussions, request evidence, identify inconsistencies, document findings, and carry assigned work to completion.
Ability to use Microsoft 365 and a BCM/GRC platform to complete assigned work.
Ability to respond to major disruptions and time-sensitive projects, including working extended hours when needed and reporting to authorized Bank recovery sites or other designated locations.
Bachelor's degree in business continuity, emergency management, risk management, business administration, finance, operations, information systems, cybersecurity, or a related field; an equivalent combination of education and/or relevant professional experience may be considered in lieu of a degree.

Nice To Haves

ABCP — Associate Business Continuity Professional.
CBCI — Certificate of the Business Continuity Institute.
CBCP — Certified Business Continuity Professional.

Responsibilities

Complete assigned business continuity and operational resilience workstreams, including schedules, stakeholder follow-up, action tracking, evidence collection, and escalation of overdue or unresolved matters.
Provide backup coverage for routine program activities, represent the function in assigned meetings, and maintain accurate status reporting without assuming management approval authority.
Facilitate, document, and quality-review business impact analyses, including impacts over time, criticality, dependencies, recovery priorities, RTO, RPO, MTPOD, and recovery tiers, subject to accountable owner and Program Lead approval.
Assist process owners in developing and maintaining business continuity plans, recovery strategies, manual workarounds, staffing requirements, alternate workplace arrangements, communication procedures, and return-to-normal steps.
Identify and document dependencies across business processes, applications, data, personnel, facilities, utilities, telecommunications, and third parties; reconcile inconsistencies and escalate unsupported assumptions or recovery gaps.
Coordinate business participation in disaster recovery tests, tabletop and notification exercises, recovery-site activities, sector exercises, and retesting.
Develop or support exercise scenarios, scripts, objectives, participant materials, validation criteria, surveys, and after-action reports.
Compare exercise and test results with business recovery requirements, document exceptions and lessons learned, and track corrective actions and retesting through closure.
Maintain assigned crisis-management and continuity activation materials, including escalation contacts, notification templates, call trees, decision logs, and situation-reporting tools.
Monitor assigned severe-weather and disruption indicators and support impact assessment, continuity coordination, recovery status reporting, and event documentation during activations or exercises.
Maintain assigned readiness information for essential personnel, alternate work, recovery sites, communications, transportation, and lodging.
Support third-party business continuity and disaster recovery reviews by collecting and reviewing continuity evidence, recovery commitments, test information, and known dependencies using the Bank's approved methodology.
Coordinate with TPRM, relationship owners, business owners, and the Technology Resiliency Engineer when vendor commitments, technical dependencies, or concentration exposures do not align with business requirements.
Maintain accurate BIA, BCP, dependency, exercise, event, evidence, and issue records in ServiceNow BCM and other approved systems; perform data-quality checks and support user guidance and functional testing.
Prepare management reports and dashboards covering plan status, testing, exceptions, action aging, recovery readiness, and data quality.
Support internal and external audits, regulatory examinations, RCSA activities, and self-identified issues by gathering evidence and drafting factual responses for management review.
Assist with maintaining BCM standards, procedures, methodologies, calendars, templates, document registers, training materials, and awareness communications.
Identify practical improvements to program workflow, data quality, stakeholder guidance, automation, and reporting while preserving approved governance and decision rights.
Respond to major disruptions and time-sensitive projects, including working extended hours when needed and reporting to authorized Bank recovery sites or other designated locations.