Senior Manager, Enterprise Resilience & Service Recovery

Nova Biomedical•Waltham, MA

1d•Hybrid

About The Position

The Senior Manager, Enterprise Resilience & Service Recovery is the hands-on enterprise capability owner for developing, operating, and continuously improving Nova Biomedical’s business continuity, disaster recovery, cyber recovery, operational resilience, crisis readiness, and major incident management capabilities. The role establishes a unified approach to preparing for disruption, protecting critical operations, coordinating response, restoring services, validating recovery, and turning lessons learned into measurable improvements. The position serves as Incident Commander for significant events regardless of origin, coordinating technical, business, executive, legal, quality, regulatory, communications, and supplier workstreams. It maintains a clear operating picture, decision cadence, recovery priorities, and accountable actions. As a player-coach, the Senior Manager sets enterprise direction and governance while also performing hands-on work in business impact analysis, service criticality, dependency mapping, recovery architecture, plan development, technical testing, exercise facilitation, incident command, communications, post-incident reviews, automation design, evidence review, remediation, and capability development. The role builds an integrated resilience and incident management capability that enables critical operations to anticipate, withstand, respond to, recover from, and learn from disruption. It engineers recoverability into services and workflows, makes incident response consistent across cyber and technology operations, automates repeatable work where practical, and replaces undocumented knowledge and untested assumptions with clear ownership, reusable playbooks, observable services, and evidence-based recovery confidence. The role owns the system of work connecting business services, tasks, workflows, skills, technology, dependencies, risks, recovery objectives, incident decisions, recovery actions, evidence, and continuous improvement. It redesigns work so people can focus on judgment, coordination, architecture, and complex problem-solving, while automation and intelligent tools support data collection, readiness checks, workflow orchestration, communications, knowledge retrieval, evidence generation, and recurring validation. The Senior Manager maintains practical continuity strategies for critical business, manufacturing, laboratory, and corporate services; improves recovery confidence through tested architecture, current playbooks, known dependencies, assigned ownership, trained teams, and reviewable evidence; and establishes consistent command for high-severity events. The role strengthens cyber recovery readiness, incorporates resilience requirements into new and changed services, provides leaders with measurable visibility into resilience posture and risk, and ensures incidents, exercises, tests, audit findings, and supplier disruptions result in accountable improvements. The position is based in Waltham, Massachusetts, with a hybrid work arrangement. Occasional travel may be required. Participation in after-hours tests, exercises, significant incidents, outages, cyber events, site disruptions, supplier failures, audits, or time-sensitive remediation may be required. The role may be part of an on-call or incident escalation structure and is expected to provide leadership and hands-on support during material disruptions.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, Risk Management, Emergency Management, or a related discipline, or equivalent practical experience.
Five or more years of progressive experience across disaster recovery, business continuity, major incident management, cyber recovery, operational resilience, infrastructure operations, cloud engineering, cybersecurity, service management, or related disciplines.
Experience building, operating, or materially improving enterprise continuity, recovery, resilience, or major incident capabilities across technical and business teams.
Experience leading high-severity technology or cyber incidents and coordinating multiple technical, business, executive, supplier, and governance workstreams.
Experience with business impact analysis, dependency mapping, continuity planning, recovery testing, exercises, technical restoration, post-incident review, or corrective action management.
Working knowledge of infrastructure, cloud, network, identity, applications, data protection, backup and recovery, observability, security, and service management dependencies.
Ability to lead at the senior manager level while remaining hands-on in incident command, planning, analysis, testing, documentation, architecture review, issue resolution, communications, and event support.
Strong written, verbal, facilitation, and executive communication skills, including the ability to explain uncertain and rapidly changing conditions without overstating facts.
Ability to protect sensitive company information and follow documented security, quality, regulatory, compliance, change, and operational procedures.
Strong incident command, facilitation, documentation, program ownership, executive communication, and cross-functional influence.
Ability to translate business impact and service criticality into practical response, continuity, recovery, and investment requirements.
Ability to work effectively during ambiguity, pressure, competing priorities, and incomplete information.
Manager-level judgment and willingness to perform detailed analysis, testing, planning, communications, and remediation work.

Nice To Haves

Experience supporting healthcare, life sciences, medical technology, manufacturing, laboratory, industrial, or another regulated environment.
Experience with enterprise incident command, IT service management, cybersecurity incident response, crisis management, emergency management, or site disruption response.
Experience with ransomware readiness, cyber recovery, identity recovery, isolated recovery environments, immutable backups, clean-room restoration, or forensic evidence preservation.
Experience with public cloud recovery, infrastructure automation, orchestration, configuration management, infrastructure as code, workflow platforms, observability, or automated validation.
Experience with manufacturing technology, operational technology, facility dependencies, site continuity, supply chain resilience, or critical suppliers.
Experience defining and validating recovery objectives, service continuity requirements, backup strategies, technical recovery runbooks, incident severity frameworks, and communication plans.
Experience with risk management, audit support, regulatory evidence, vendor resilience, executive reporting, insurance support, or customer assurance activities.
Relevant certifications or training in business continuity, disaster recovery, cybersecurity, cloud, infrastructure, IT service management, emergency management, crisis management, or operational resilience.

Responsibilities

Own and maintain the enterprise resilience and major incident management roadmap, operating model, standards, governance, testing framework, maturity priorities, metrics, and executive reporting.
Establish accountability for continuity, disaster recovery, cyber recovery, backup integrity, service recoverability, incident command, crisis coordination, exercises, remediation, exceptions, and risk acceptance.
Define tiered minimum resilience requirements for critical services, applications, infrastructure, cloud platforms, identity services, manufacturing technology, facilities, suppliers, and business processes.
Integrate resilience requirements into architecture, service management, change management, supplier management, cybersecurity, quality, compliance, and technology lifecycle processes.
Provide leadership with visibility into resilience posture, active incidents, recovery confidence, material gaps, overdue remediation, accepted risks, resource constraints, and investment priorities.
Lead business impact analysis, critical process identification, continuity planning, service prioritization, dependency mapping, and continuity strategy development across applicable global operations.
Partner with business owners to define and validate recovery time objectives, recovery point objectives, maximum tolerable disruption, minimum service levels, staffing needs, alternate procedures, location requirements, communications needs, and third-party dependencies.
Ensure continuity plans are practical, current, accessible when normal systems are unavailable, and integrated with technology recovery, crisis management, facilities, communications, quality, and supplier response.
Facilitate continuity plan reviews and scenario exercises that validate decisions, handoffs, workarounds, resources, contact paths, and operating assumptions.
Own the enterprise disaster recovery framework and partner with technical and business teams to engineer recoverable services.
Review recovery architecture, sequencing, dependencies, data protection, restoration methods, access requirements, runbooks, validation criteria, fallback options, and recovery evidence.
Participate directly in recovery planning, technical tests, failover activities, issue diagnosis, restoration validation, remediation tracking, and recovery procedure improvement.
Reconcile approved recovery objectives with demonstrated technical capabilities and escalate material gaps.
Build and mature cyber recovery strategies addressing identity compromise, destructive activity, impaired administrative tools, malicious persistence, unavailable networks, contaminated backups, and uncertain system trust.
Partner with cybersecurity and infrastructure teams on prioritized recovery of identity, privileged access, network control points, security tools, infrastructure, applications, data, collaboration services, and manufacturing operations.
Define requirements for known-good recovery sources, backup immutability, isolation, protected administration, clean-room recovery, integrity and security validation, forensic preservation, and controlled return to service.
Lead or support cyber recovery exercises covering technical restoration, business priorities, executive decisions, legal and regulatory coordination, communications, quality implications, and sustained operations.
Serve as Incident Commander, or designate and support an appropriate Incident Commander, for Severity 1 and other material incidents.
Establish incident scope, business impact, command roles, technical workstreams, decision authority, communication cadence, escalation paths, recovery priorities, action tracking, and transition criteria from response to recovery.
Maintain an operating picture that distinguishes confirmed facts, hypotheses, unknowns, risks, dependencies, decisions, actions, owners, expected updates, and business consequences.
Coordinate technical and business workstreams while preventing duplicated effort, uncontrolled changes, conflicting communications, and premature restoration.
Ensure incident decisions balance restoration, security, safety, data integrity, product quality, regulatory obligations, customer impact, evidence preservation, and operational stability.
Establish communication standards and templates for responders and stakeholders, and produce or coordinate timely, factual situation reports appropriate to each audience.
Maintain incident records supporting operational handoffs, post-event review, regulatory or contractual needs, insurance support, evidence preservation, and executive understanding.
Partner with service management, monitoring, observability, cybersecurity operations, engineering, and application teams to improve incident recognition, declaration, severity assignment, routing, mobilization, and escalation.
Define activation criteria, on-call expectations, response roles, communication channels, bridge procedures, escalation matrices, and handoffs among service desk, operations, security, engineering, vendors, and business teams.
Identify missing telemetry, ownership, documentation, access, tooling, and support coverage that delay diagnosis and recovery, and drive accountable remediation.
Establish backup governance for coverage, retention, protection, monitoring, immutability, restore testing, ownership, exceptions, evidence, lifecycle alignment, and recovery dependencies.
Validate that protected data and systems can be restored within approved objectives, and drive remediation of protection and recoverability gaps.
Identify work suitable for simplification, orchestration, scripting, infrastructure as code, configuration automation, workflow integration, automated validation, evidence capture, and governed AI assistance.
Partner with engineering teams to build reusable recovery and incident response patterns and automate readiness checks, dependency verification, recovery sequencing, status collection, notifications, validation, documentation, metrics, and exception workflows where practical.
Use AI-enabled capabilities responsibly to summarize operational signals, retrieve approved knowledge, support reporting, identify missing data, and assist responders while preserving human accountability.
Measure automation value through time saved, delays removed, quality improvements, error reduction, and risk mitigation.
Participate in architecture and significant change reviews to assess resilience and recoverability before deployment.
Evaluate single points of failure, availability design, concentration, capacity, failover, data consistency, identity dependencies, observability, operational support, maintainability, and recovery complexity.
Develop a risk-based program of tabletop exercises, technical recovery tests, restore tests, failover exercises, continuity exercises, cyber recovery simulations, incident drills, executive crisis exercises, and integrated scenarios.
Define exercise objectives, scope, assumptions, participants, success criteria, decision points, dependencies, evidence requirements, observations, and remediation ownership.
Track findings through verified closure and analyze recurring issues to improve architecture, automation, procedures, training, service ownership, supplier expectations, and investment priorities.
Partner with Manufacturing, Quality, Engineering, Facilities, Supply Chain, Environmental Health and Safety, and technology teams to understand production, laboratory, utility, facility, operational technology, data, material, and workforce dependencies.
Develop continuity and recovery strategies for site disruption, utility loss, technology failure, supplier interruption, workforce constraints, cyber events, equipment dependencies, and loss of critical services.
Define resilience and incident response expectations for critical technology providers, cloud services, managed services, logistics partners, suppliers, and other external dependencies.
Support risk-based supplier reviews and ensure supplier contacts, entitlements, escalation procedures, dependencies, and recovery responsibilities are available to response teams.
Lead blameless, evidence-based post-incident reviews and convert lessons into prioritized actions with accountable owners, target dates, completion evidence, and validation of risk reduction.
Partner with problem management and engineering teams to identify recurring incident patterns, remove structural causes, improve recovery patterns, and reduce future responder demand.
Operate as a player-coach, setting direction, performing hands-on work, developing others, and coordinating employees, partners, service providers, and matrixed contributors.
Assign work based on risk and required capabilities, establish quality expectations, remove blockers, review deliverables, and create accountability for outcomes.
Develop resilience and incident leadership skills through coaching, exercises, role-based training, playbooks, reusable workflows, and communities of practice.
Define measures for critical service coverage, BIA currency, plan quality, exercise participation, recovery test coverage and success, objective attainment, incident mobilization, restoration performance, communication timeliness, repeat incidents, automation adoption, gap aging, and action closure.
Maintain appropriate evidence for leadership, audit, regulatory, quality, customer, insurance, contractual, and risk-management needs.
Declare, classify, escalate, and coordinate major incidents within approved criteria and delegated authority; establish command structures, response cadence, workstreams, action tracking, and communication expectations.
Recommend recovery priorities using approved criticality, impact, safety, quality, regulatory, customer, and dependency information.
Require recovery testing, corrective action, evidence, and risk review when critical services do not demonstrate approved outcomes; escalate material risks and decisions requiring executive attention.
Pause or recommend delaying recovery or return-to-service activities when evidence indicates unacceptable security, safety, product quality, data integrity, regulatory, or operational stability risk.