Senior Manager, Business Continuity Planning

Loblaw Companies Limited•Brampton, ON

About The Position

The Senior Manager, Business Continuity Planning (BCP) is responsible for leading the design, implementation, and continuous improvement of an enterprise-wide Business Continuity Management (BCM) program. This role ensures the organization can effectively prepare for, respond to, and recover from disruptions—including cyber incidents, technology failures, and operational events—while strengthening organizational resilience and advancing alignment with the NIST Cybersecurity Framework. The role partners closely with Technology, Cybersecurity, Risk, and Business leaders to embed resilience into core operations and ensure continuity capabilities are measurable, testable, and continuously improving. The BCM Program is designed to enhance organizational resilience by establishing a sustainable, enterprise-wide continuity framework aligned with the NIST Cybersecurity Framework, with particular focus on strengthening Respond (RS) and Recover (RC) capabilities.

Requirements

8–12+ years in Business Continuity, Disaster Recovery, Risk Management, or Cyber Resilience
Strong knowledge of the NIST Cybersecurity Framework and/or ISO 22301
Proven experience building and scaling enterprise BCM programs
Experience integrating BCP with Cybersecurity and IT DR functions
Strong stakeholder management and executive communication skills

Responsibilities

Lead the enterprise BCM program, including governance, policy, and standards aligned to NIST CSF
Define KPIs and maturity metrics to track improvements in response and recovery capabilities
Provide regular reporting to senior leadership and risk committees
Oversee identification and prioritization of critical business services and processes
Validate recovery requirements, including Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO)
Ensure alignment with enterprise risk and technology recovery strategies
Facilitate enterprise-wide risk assessments focused on operational and cyber resilience
Identify vulnerabilities and define mitigation and resilience strategies
Integrate outputs into broader enterprise risk management processes
Develop and maintain actionable continuity plans covering: Incident response, Business resumption, Service recovery and restoration
Ensure plans are standardized, accessible, and aligned to NIST response/recovery requirements
Partner with Technology teams to align DR strategies with business priorities
Ensure DR plans meet defined RTO/RPO targets and support critical services
Validate recovery dependencies across systems, infrastructure, and third parties
Establish and maintain crisis management frameworks, including: Escalation protocols, Executive decision-making structures, Internal and external communication strategies
Support real-time incident coordination during major events
Align BCM with emergency management procedures and operational response models
Ensure coordination across physical, cyber, and operational incidents
Incorporate lessons learned from recent global events and evolving threat landscapes
Maintain playbooks for infectious disease, workforce disruption, and supply chain impacts
Develop and deliver role-based training programs
Drive enterprise awareness to embed resilience into day-to-day operations
Enable business ownership of continuity capabilities
Design and execute scenario-based exercises (e.g., cyberattack, system outage, supply disruption)
Conduct tabletop and simulation exercises to validate readiness
Track gaps, remediation actions, and continuous improvement outcomes