Location: US, Remote
Company: DataSpring
DataSpring is seeking a Business Continuity and Risk Management Director responsible for defining and advancing the enterprise strategy, governance framework, and organizational standards for business continuity and risk management. This role serves as DataSpring’s recognized subject matter expert on operational resilience and partners with senior leaders across the organization to strengthen preparedness, reduce organizational risk, and ensure continuity of critical operations during disruptive events. The role blends strategic planning, risk management, and cross-functional leadership to build resilience and maintain operational stability.
The Director develops enterprise-wide approaches to business continuity, risk assessment, crisis management, and resilience planning while influencing strategic decisions that impact operational stability, client commitments, regulatory requirements, and organizational growth. This position leads through expertise, strategic influence, and organizational credibility rather than direct people management.
Job role:
Enterprise strategy and governance
- Define and evolve DataSpring’s enterprise business continuity and risk management strategy to support organizational objectives and operational resilience.
- Establish organizational standards, governance frameworks, policies, and best practices related to continuity planning, risk management, and crisis preparedness.
- Identify emerging risks, industry trends, and evolving regulatory requirements and provide strategic leadership to ensure organizational readiness and compliance.
- Develop enterprise roadmaps and priorities that strengthen resilience capabilities and organizational readiness.
Business continuity leadership
- Establish and maintain the enterprise framework for business continuity planning (BCP) across the organization.
- Provide strategic oversight of business continuity activities and ensure alignment with industry standards including ISO 22301 and NIST 800-34.
- Evaluate continuity capabilities across business functions and drive improvements that enhance organizational resilience.
- Guide continuity planning efforts for critical business processes, services, and operational dependencies.
- Establish and oversee continuity testing, tabletop exercises, simulations, and recovery validation activities to evaluate organizational readiness and drive continuous improvement.
Enterprise risk management
- Define enterprise approaches for risk identification, assessment, mitigation, monitoring, and reporting.
- Lead enterprise business impact analysis (BIA) methodologies, standards, and assessments to identify critical business functions, operational dependencies, recovery priorities, and organizational risk exposure.
- Oversee risk management processes including risk registers, incident management practices, risk control self-assessments (RCSAs), and issue management frameworks.
- Assess organizational risk exposure and recommend mitigation strategies that support business objectives.
Crisis management and organizational resilience
- Establish enterprise crisis management frameworks, response protocols, escalation procedures, and governance structures.
- Serve as the organization’s senior advisor on continuity and resilience matters during disruptive events.
- Provide strategic guidance to leadership regarding operational impacts, recovery priorities, and organizational response actions.
- Lead post-incident reviews and drive continuous improvement initiatives that strengthen organizational preparedness.
Cross-functional influence and partnership
- Partner with leaders across operations, technology, legal, compliance, finance, product development, and information security to integrate resilience and risk management into business planning and decision-making.
- Influence organizational priorities by providing expert guidance on business continuity, operational risk, and resilience considerations.
- Collaborate with technology leadership to align disaster recovery capabilities, recovery objectives, and resilience strategies.
- Build strong relationships with clients, vendors, auditors, and regulatory stakeholders on matters related to business continuity and risk management.
- Assess and influence third-party resilience capabilities, vendor dependencies, and continuity obligations that may impact critical business operations.
Organizational capability building
- Develop enterprise training, awareness, and preparedness programs that strengthen continuity and risk management capabilities across the organization.
- Establish metrics, performance indicators, and reporting frameworks that provide leadership visibility into organizational resilience and risk posture.
- Promote a culture of preparedness, accountability, and proactive risk management throughout DataSpring.
- Mentor leaders and cross-functional partners on continuity planning, risk assessment, and resilience best practices.