Staff Specialist - Business Continuity Lead

UVA Health•Charlottesville, VA

1d•$102,851 - $205,703•Onsite

About The Position

Help safeguard the continuity of care and essential operations across a complex academic health system. This highly visible enterprise role offers the opportunity to shape how UVA Health prepares for, responds to, and recovers from cyber incidents, technology disruptions, and operational crises. The Staff Specialist - Business Continuity Lead will build, mature, and lead an enterprise-wide Business Continuity Management program. Working at both strategic and operational levels, this leader will combine cyber resilience, risk analysis, recovery planning, crisis management, and executive engagement to strengthen organizational readiness and protect the critical services that support patients, clinicians, team members, and the communities UVA Health serves. As a recognized subject matter expert and trusted advisor, you will own and advance the Business Continuity Management lifecycle across planning, testing, and governance. You will partner with clinical, operational, academic, administrative, technology, and security stakeholders to identify vulnerabilities, develop practical recovery strategies, and ensure continuity plans remain effective, current, and auditable.

Requirements

High School Diploma
7 years of experience

Nice To Haves

Bachelor's Degree Preferred
5 to 10 years working in business continuity, risk management, or operations.
Familiarity with global standards like ISO 22301 or BCI Good Practice Guidelines.
Previous use of BCP Platforms such as Fusion or Riskonnect.
Ability to stay calm under pressure, lead cross-functional groups, and talk clearly to top executives.
Professional credentials like CBCP (Certified Business Continuity
Experience supporting healthcare cybersecurity programs or academic health systems.
Experience with EPIC systems and building resiliency.
Experience with phishing simulation platforms and awareness maturity metrics.
Familiarity with NIST CSF, HIPAA security principles, and healthcare compliance expectations.
Relevant certifications such as Security+, HCISPP, CISSP, CISM, CISA (or progress toward), or equivalent.

Responsibilities

Owning and evolving the enterprise Business Continuity Management program, with an emphasis on automation, innovation, governance, and continuous improvement.
Conducting rigorous Business Impact Analyses to identify critical processes, dependencies, single points of failure, and appropriate recovery time objectives.
Developing, maintaining, and strengthening Business Continuity Plans and Disaster Recovery Plans for essential operations and systems.
Partnering with Information Security and Technology teams to prepare for ransomware, data loss, infrastructure outages, and other disruptive cyber events.
Designing and leading tabletop exercises, simulations, and operational tests to validate recovery capabilities and identify improvement opportunities.
Facilitating governance forums and presenting program updates, risk trends, and recommendations to senior leaders.
Translating complex continuity and resilience data into clear, credible narratives that support timely executive decisions.
Analyzing end-to-end processes and diverse data sets to identify risk patterns and design effective controls.
Serving as a trusted advisor during active incidents, helping response teams and organizational leaders evaluate priorities and make informed decisions.
Building a culture of preparedness through training, education, and practical guidance that helps team members understand their responsibilities during an emergency.
Mentoring junior colleagues and providing expert guidance to cross-functional initiatives.