Resiliency Lead

Fresenius Medical Care • Washington, DC

1d • Remote

About The Position

The Resiliency Lead is a senior security executive responsible for designing, implementing, and sustaining a globally integrated resiliency framework encompassing business continuity management (BCM), corporate crisis management, and incident and emergency response across a complex, regulated, multinational healthcare enterprise. This role ensures the organization can anticipate, withstand, respond to, and recover from disruptions while safeguarding patients, employees, operations, and brand reputation. The position aligns resiliency capabilities with enterprise risk management, regulatory obligations, and strategic business objectives, leveraging globally recognized standards such as ISO 22301 (Business Continuity Management), ISO 31000 (Risk Management), and ISO 22320 (Emergency Management). The incumbent in this role will act as the key business partner in advising and supporting the businesses in Business Continuity management and supporting all businesses and functions in developing and implementing risk-based Business Impact Assessments (BIA), Business Continuity Plans (BCP), BCM metrics, awareness programs, supervising/conducting drills/exercises and delivering training including providing standard templates and training materials. This role is also responsible for developing the FME Pandemic Response Plan and collaborating closely with key stakeholders to ensure consistency between resiliency, business continuity, ITS disaster response and recovery, insurance. This position requires strong cross-functional collaboration with various internal and external stakeholders. The role must demonstrate sound judgment, integrity, and an initiative-taking approach to identifying and mitigating security risks while aligning with FME’s strategic business objectives. It requires a forward-looking leader with the ability to assess and mitigate risks, ensure regulatory compliance, build strong external partnerships, and leverage intelligence and technology to drive an industry leading resiliency program.

Requirements

• Bachelor’s degree in Intelligence Studies, Security Management, Behavioral Science, or related field (master’s preferred); possess an active/in-scope security clearance.
• Minimum of 15 years of experience in security management roles, with demonstrated expertise across a broad range of security and risk management domains.
• Proven track-record in compliance programs, risk management, and incident response.
• Experience in systems management and leading people
• Experience managing third-party vendors and cross-functional teams.
• Deep understanding of threat actor methodologies, behavioral threat indicators, and intelligence tradecraft.
• Strong analytical, investigative, and communication skills.
• Experience with insider threat platforms, SIEM tools, and behavioral analytics.
• Ability to operate in high-pressure environments and manage sensitive, confidential information with discretion.
• Ability to work in a matrixed, resource-constrained, and diverse environment.

Nice To Haves

• Certified Threat Manager (CTM)
• Certified Protection Professional (CPP)
• Insider Threat Program Manager (ITPM)
• Intelligence Community or Law Enforcement credentials

Responsibilities

• Implement a comprehensive enterprise resiliency strategy encompassing business continuity, crisis management, and emergency response, aligned with FME’s business strategy, enterprise risk appetite, and international standards.
• Design, implement, and govern a global Business Continuity Management System (BCMS), ensuring consistent, risk‑based application across functions, regions, and critical suppliers in alignment with international frameworks.
• Implement and drive mature a risk‑based Business Impact Analysis program that defines recovery objectives, identifies critical dependencies, and directly informs Business Continuity Plans, assurance activities, executive reporting, and investment priorities.
• Oversee the corporate crisis management framework and serve as a senior leader during enterprise‑level crises, providing executive briefings and ensuring coordinated response across security, legal, HR, IT, communications, compliance, and clinical leadership.
• Direct global incident, emergency, and pandemic preparedness planning, embedding response standards, playbooks, and workforce resilience strategies to ensure readiness for prolonged and complex disruption scenarios.
• Integrate supply chain resilience into enterprise continuity planning by identifying critical supplier dependencies, addressing single‑source and geographic risks, and ensuring disruption scenarios are evaluated and reported at the executive level.
• Build and lead a high‑performing global resiliency team while driving training, exercises, regulatory compliance, performance measurement, and continuous improvement to embed a sustainable culture of preparedness across FME.
• Develop and execute a comprehensive enterprise resiliency strategy covering business continuity, crisis management, and emergency response that is aligned with FME’s business strategy, key priorities, and enterprise risk appetite.
• Establish governance structures, policies, standards, and operating models that align with ISO and other applicable international best‑practice frameworks while ensuring scalability across regions and business units.
• Serve as an expert for organizational resiliency, providing strategic guidance and decision support to the VP, Corporate Security Center of Excellence and other FME leadership.
• Design, implement, and maintain a global Business Continuity Management System (BCMS) in alignment with international standards, ensuring consistent application across functions, regions, and critical suppliers.
• Oversee business impact analysis (BIA) and risk assessments to define recovery time and recovery point objectives for critical healthcare operations and corporate functions.
• Leads the design and governance of a risk‑based Business Impact Analysis program aligned with international standards and industry frameworks.
• Ensures BIAs consistently identify critical processes, dependencies, and recovery objectives, and that outputs directly inform Business Continuity Plans, assurance activities, and executive reporting.
• Supports periodic BIA reviews to reflect evolving risk profiles and business priorities.
• Ensure continuity plans are evaluated, validated, and continuously improved through exercises, audits, and lessons learned.
• Oversee the design of a corporate crisis management framework, including governance, escalation protocols, executive decision‑making structures, and communications coordination.
• Serve on the crisis management leadership team during enterprise‑level crises, ensuring rapid coordination across security, legal, communications, HR, IT, compliance, and clinical leadership.
• Provide executive‑level briefings before, during, and after crises, translating complex risk information into clear, actionable guidance.
• Oversee global incident and emergency response planning, ensuring readiness for natural disasters, public health emergencies, geopolitical incidents, supply chain disruptions, and other impactful events.
• Define response standards, playbooks, and command structures and leading incident management practices.
• Ensure incident data, reporting, and post‑incident reviews drive corrective actions and long‑term resilience improvements.
• Owns the development and integration of pandemic and widespread health emergency preparedness into enterprise continuity and crisis management frameworks.
• Ensure plans address workforce disruption, critical skill dependencies, remote operations, and regional regulatory requirements.
• Embeds pandemic scenarios into BIAs, exercises, and training to sustain operational readiness during prolonged health crises.
• Integrates supply chain resilience into BCM by identifying and assessing critical supplier and logistics dependencies through BIAs and risk assessments.
• Partners with Supply Chain, Procurement, and Operations to embed continuity expectations for key third parties and address single‑source and geographic concentration risks.
• Ensure supply chain disruption scenarios are evaluated through exercises and reflected in executive reporting and improvement plans.
• Ensure resiliency programs comply with applicable healthcare regulations, privacy requirements, labor laws, and regional regulatory expectations.
• Integrate resiliency planning with enterprise risk management, cyber resilience, supply chain risk management, and corporate security intelligence activities.
• Benchmark program maturity against industry peers, regulatory expectations, and evolving global standards.
• Oversee the development and delivery of crisis management, continuity, and emergency response training for executives, managers, and response teams.
• Design and lead tabletop exercises, simulations, and full‑scale drills to evaluate decision‑making, coordination, and recovery capabilities.
• Foster a culture of preparedness and resilience across the enterprise.
• Build and lead a high‑performing global resiliency team, setting clear expectations, developing talent, and modeling enterprise leadership values.
• Partner closely with business leaders, regional security heads, IT, clinical operations, compliance, and external partners to ensure cohesive resiliency outcomes.
• Track program performance through KPIs, metrics, and reporting, driving continuous improvement and executive transparency.

Benefits

• medical, dental, and vision insurance
• a 401(k) with company match
• paid time off
• parental leave
• potential for performance-based bonuses depending on company and individual performance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior