Senior Business Resiliency Manager

Allstate

About The Position

As a Senior Business Resiliency Manager, you'll be a strategic leader responsible for driving a unified, forward-looking resiliency strategy that strengthens Allstate's ability to anticipate, prepare for, withstand, respond to, and rapidly recover from disruptive events including ransomware and other destructive cyber attacks. You'll oversee the continuous maturity of cyber and technology resiliency, disaster recovery, business continuity, and crisis management programs - ensuring they operate cohesively and evolve with the changing threat and technology landscape. You'll drive strategy development, operational execution, governance, and continuous improvement across all resiliency domains, and partner closely with senior leaders across Technology, Security, Operations, Second Line Risk, and Internal Audit to deliver resiliency outcomes aligned with enterprise strategy. Cyber & Technology Resiliency Strengthen recovery for hybrid/cloud environments and critical applications through resilient design and backups. Strengthen cyber recovery capabilities, including ransomware readiness, through validated backups and robust, repeatable restoration processes. Align resiliency capabilities with evolving threats and regulatory expectations in partnership with Cybersecurity. Oversee readiness of isolated recovery environments and recovery governance. Shape and drive recovery strategies grounded in business-prioritized functions to strengthen enterprise resilience. Run targeted cyber tabletops to validate readiness and reduce emerging risks. Disaster Recovery & Business Continuity Advance BC, DR maturity by ensuring strategies, plans meet business needs and reflect evolving threats. Oversee dependency mapping, runbooks, and team engagement to ensure accurate recovery models. Partner with business units to ensure continuity plans address operational, technology, and crisis response needs. Crisis Management & Incident Preparedness Oversee crisis management frameworks, communication protocols, and leadership decision-support processes. Lead or support response activities during large-scale technology or cyber incidents. Support enterprise tabletop exercises, simulations, and after-action reviews to identify improvements and strengthen organizational readiness. Risk, Compliance & Reporting Ensure alignment with regulatory and industry frameworks (NIST, ISO 22301, FFIEC, NYDFS 500.16). Produce executive-level reporting on resiliency posture, program maturity, risks, and remediation efforts. Identify gaps and drive remediation with technology, business, and security partners. People Leadership & Collaboration Lead and develop a high-performing team of resiliency professionals. Foster a culture of accountability, preparedness, and cross-functional partnership. Engage leaders across Technology, Security, and Business to drive alignment and adoption of resiliency practices.

Requirements

10+ years of experience in cyber resiliency, DR/BC/CM, technology risk, or cyber risk
Proven leadership, communication, and program development capabilities
Experience leading enterprise resiliency programs (e.g., DR, BC, Crisis Management)
Strong strategic planning, risk assessment, and critical thinking skills
Deep knowledge of high-availability architectures, cyber threats, and backup/restore technologies
Broad understanding of core IT infrastructure, Datacenter operations, SOC operations, and incident management
Excellent communication skills, executive presence, and ability to influence at all levels

Responsibilities

Driving a unified, forward-looking resiliency strategy
Overseeing the continuous maturity of cyber and technology resiliency, disaster recovery, business continuity, and crisis management programs
Driving strategy development, operational execution, governance, and continuous improvement across all resiliency domains
Partnering closely with senior leaders across Technology, Security, Operations, Second Line Risk, and Internal Audit
Strengthening recovery for hybrid/cloud environments and critical applications through resilient design and backups
Strengthening cyber recovery capabilities, including ransomware readiness, through validated backups and robust, repeatable restoration processes
Aligning resiliency capabilities with evolving threats and regulatory expectations in partnership with Cybersecurity
Overseeing readiness of isolated recovery environments and recovery governance
Shaping and drive recovery strategies grounded in business-prioritized functions to strengthen enterprise resilience
Running targeted cyber tabletops to validate readiness and reduce emerging risks
Advancing BC, DR maturity by ensuring strategies, plans meet business needs and reflect evolving threats
Overseeing dependency mapping, runbooks, and team engagement to ensure accurate recovery models
Partnering with business units to ensure continuity plans address operational, technology, and crisis response needs
Overseeing crisis management frameworks, communication protocols, and leadership decision-support processes
Leading or supporting response activities during large-scale technology or cyber incidents
Supporting enterprise tabletop exercises, simulations, and after-action reviews to identify improvements and strengthen organizational readiness
Ensuring alignment with regulatory and industry frameworks (NIST, ISO 22301, FFIEC, NYDFS 500.16)
Producing executive-level reporting on resiliency posture, program maturity, risks, and remediation efforts
Identifying gaps and drive remediation with technology, business, and security partners
Leading and develop a high-performing team of resiliency professionals
Fostering a culture of accountability, preparedness, and cross-functional partnership
Engaging leaders across Technology, Security, and Business to drive alignment and adoption of resiliency practices