Location: US, Florida, Hybrid
Company: City National Bank
The Operational Resilience Analyst supports the bank’s ability to prepare for, withstand, respond to, and recover from disruptions affecting critical business processes and services. The role executes assigned business continuity and operational resilience activities, including business impact analyses (BIAs), continuity planning, recovery strategies, dependency analysis, exercises and disaster recovery (DR) test coordination, crisis readiness, ServiceNow Business Continuity Management (BCM) data stewardship, third-party continuity support, issue tracking, regulatory evidence, and management reporting. The analyst carries assigned work through completion with limited supervision, serves as backup coverage for routine program activities, and escalates matters requiring leadership approval or risk decisions.
Job role:
Program execution and coverage:
- Perform assigned BCM and operational resilience workstreams through completion, including schedules, stakeholder follow-up, action tracking, evidence collection, and escalation of overdue or unresolved matters.
- Serve as backup for routine program activities, represent the function in assigned meetings, and maintain accurate status reporting without assuming management approval authority.
Business impact analysis and continuity planning:
- Facilitate, document, and quality-review BIAs with business units, including impact over time, criticality, dependencies, recovery priorities, recovery time objective (RTO), recovery point objective (RPO), maximum tolerable period of disruption (MTPOD), and recovery tiers, subject to accountable owner and Program Lead approval.
- Assist process owners in developing and maintaining practical business continuity plans (BCPs), recovery strategies, manual workarounds, staffing requirements, alternate workplace arrangements, communication procedures, and return-to-normal steps.
- Identify and document dependencies across business processes, applications, data, personnel, facilities, utilities, telecommunications, and third parties; reconcile inconsistencies and escalate unsupported assumptions or recovery gaps.
Testing, exercises, and recovery validation:
- Coordinate business participation in DR tests, tabletop exercises, notification exercises, recovery-site activities, sector exercises, and retesting.
- Develop or support scenarios, scripts, objectives, participant materials, validation criteria, surveys, and after-action reports.
- Compare results against business recovery requirements, document exceptions and lessons learned, and track corrective actions and retesting through closure. Technology teams retain technical recovery ownership.
Crisis and disruption readiness:
- Maintain assigned crisis-management and continuity activation materials, escalation contacts, notification templates, call trees, decision logs, and situation-reporting tools.
- Monitor assigned severe-weather and disruption indicators and support business impact assessment, continuity coordination, recovery status reporting, and event documentation during activations or exercises.
- Maintain essential-personnel, alternate-work, recovery-site, communications, transportation, and lodging readiness information where assigned.
Third-party and service resilience:
- Support third-party business continuity and disaster recovery (BCDR) reviews by collecting and reviewing continuity evidence, recovery commitments, test information, and known dependencies using the bank’s approved methodology.
- Coordinate with third-party risk management (TPRM), relationship owners, business owners, and the Technology Resiliency Engineer when vendor recovery commitments, technical dependencies, or concentration exposures do not align with business requirements.
Systems, evidence, and reporting:
- Maintain accurate BIA, BCP, dependency, exercise, event, evidence, and issue records in ServiceNow BCM and other approved systems; perform data-quality checks and support user guidance and functional testing.
- Prepare management reports and dashboards covering plan status, testing, exceptions, action aging, recovery readiness, and data quality.
- Support internal audit, external audit, regulatory examinations, risk and control self-assessment (RCSA) activities, and self-identified issues by gathering evidence and drafting factual responses for management review.
Governance and continuous improvement:
- Assist with maintaining BCM standards, procedures, methodologies, calendars, templates, document registers, training materials, and awareness communications.
- Identify practical improvements to program workflow, data quality, stakeholder guidance, automation, and reporting, while preserving approved governance and decision rights.