Senior Manager, Disaster Recovery

Loblaw Companies Limited•Brampton, ON

About The Position

The Senior Manager, Disaster Recovery (DR) is responsible for leading the design, implementation, and continuous improvement of the organization’s IT Disaster Recovery program. This role ensures that critical technology systems, applications, and infrastructure can be restored within defined recovery objectives following disruptions, including cyber incidents, system failures, and major outages. The role partners closely with Technology, Cybersecurity, Business Continuity, and Infrastructure teams to deliver an integrated resilience capability aligned to the NIST Cybersecurity Framework, with a strong focus on Recover (RC) and Respond (RS) functions.

Requirements

8–12+ years in Disaster Recovery, IT Infrastructure, Cloud Engineering, or Technology Risk
Deep knowledge of DR strategies, tools, and architectures (on-prem, cloud, hybrid)
Strong understanding of the NIST Cybersecurity Framework and/or ISO 22301 / ISO 27031
Experience leading enterprise-scale DR programs and major incident recovery efforts
Hands-on experience with backup, replication, and cloud recovery technologies (e.g., Azure, GCP)
Strong executive communication and stakeholder management skills

Responsibilities

Lead the enterprise Disaster Recovery program, including strategy, roadmap, and governance
Establish DR policies, standards, and procedures aligned with the NIST Cybersecurity Framework and industry best practices
Define and track DR maturity metrics and KPIs (e.g., recovery success rates, RTO/RPO adherence)
Provide regular reporting to senior leadership and risk committees
Oversee development and maintenance of Disaster Recovery plans for critical systems and platforms
Ensure all plans are actionable, tested, and aligned with business priorities
Lead recovery efforts during major incidents, coordinating across infrastructure, applications, and vendors
Ensure clear runbooks and failover/failback procedures are in place
Define and validate Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) in partnership with business and application owners
Ensure DR solutions are designed to meet agreed recovery objectives
Identify gaps and drive remediation plans to close recovery capability gaps
Partner with Infrastructure, Cloud, and Application teams to design resilient architectures
Ensure appropriate use of backup, replication, high availability, and cloud recovery solutions
Provide guidance on resilience patterns (e.g., active-active, active-passive, geo-redundancy)
Evaluate third-party/vendor DR capabilities and dependencies
Align Disaster Recovery with Cyber Incident Response and Cyber Recovery strategies
Support ransomware recovery planning, including immutable backups and clean recovery environments
Participate in cyber incident simulations and real-time response activities
Design and execute comprehensive DR testing programs, including: Tabletop exercises, Technical failover tests, Full-scale recovery simulations
Track test outcomes, gaps, and remediation activities
Ensure continuous improvement through lessons learned
Ensure DR program meets internal policies, regulatory requirements, and audit expectations
Maintain documentation and evidence to support audits and assessments
Track compliance across all critical systems and applications
Build strong relationships with business, technology, and executive stakeholders
Provide training and guidance to application and infrastructure teams on DR requirements
Promote a culture of resilience and accountability across the organization