Senior Cybersecurity Disaster Recovery, Contingency Planning SME

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and direct nationwide BIA, DRP, ISCP, and contingency planning projects from the stages of program planning and rollout to implementation, quality assurance, approval, and final delivery.

• Manage multiple cross-functional teams located across various geographies by setting priorities, coordinating resources, tracking progress, and ensuring timely completion of all deliverables.

• Create and implement national strategies for rollout, which include methodologies, templates, procedures, schedules, training, communication efforts, milestones, and criteria for completion.

• Collaborate with facility leadership, business owners, system owners, IT staff, cybersecurity teams, COOP personnel, and executive stakeholders.

• Monitor the completion of nationwide BIA and DRP initiatives, identify potential gaps and risks, resolve issues, and report program status to senior leadership.

• Lead the development, review, and upkeep of BPA, BIA, DRP, ISCP, and continuity-related documentation.

• Analyze BIA findings to pinpoint critical functions, systems, dependencies, recovery priorities, RTOs, RPOs, MTD, and enterprise-wide risks.

• Act as a senior cybersecurity Subject Matter Expert (SME) for DRCP and continuity tasks, addressing cybersecurity risks, system dependencies, data protection, access controls, and essential technology requirements.

• Develop and update cybersecurity and DRCP policies, SOPs, procedures, standards, templates, and governance documentation.

• Utilize frameworks such as NIST SP 800-34, NIST SP 800-37, NIST SP 800-53, NIST IR 8286D, and NIST IR 8179 in relevant processes.

• Plan, facilitate, and document tabletop exercises, continuity tests, disaster recovery drills, and plan reviews, including corrective actions and remediation efforts.

• Conduct quality assurance and technical reviews; assist with audits, assessments, compliance reviews, evidence collection, findings remediation, and executive reporting.

• Prepare technical reports, executive briefings, policy memoranda, status updates, meeting materials, and other forms of communication.

• Maintain program schedules, repositories, inventories, dashboards, and tools that support ongoing DRCP reviews, exercises, testing, and program activities.

⛳️ Requirements

• A minimum of 10 years of progressively responsible experience in cybersecurity, information security, disaster recovery, business continuity, contingency planning, risk management, or a related discipline.

• Extensive experience in cybersecurity, particularly in applying cybersecurity principles to disaster recovery, contingency planning, business continuity, and organizational resilience.

• Proven experience in leading and managing multiple cross-functional and/or geographically diverse teams.

• Experienced in overseeing large-scale, multi-site, regional, or nationwide BIA, DRP, ISCP, or contingency planning programs.

• Direct experience in developing, implementing, reviewing, and finalizing BPA, BIA, DRP, ISCP, and related continuity documentation.

• Ability to manage complex programs from initial planning and rollout stages through to final submission, quality assurance, approval, and completion.

• Strong familiarity with NIST SP 800-34, NIST SP 800-37, NIST SP 800-53, NIST IR 8286D, and NIST IR 8179.

• Experience in cybersecurity, disaster recovery, contingency planning, business continuity, COOP, risk management, and organizational resilience.

• Background in developing and implementing cybersecurity and DRCP policies, SOPs, procedures, standards, templates, and governance documentation.

• Experience in conducting or facilitating tabletop exercises, contingency and continuity tests, disaster recovery drills, plan reviews, and corrective-action initiatives.

• Familiarity with supporting audits, assessments, compliance reviews, evidence collection, and remediation of findings.

• Excellent technical writing, editing, analytical, organizational, facilitation, and communication skills, with the ability to convey complex cybersecurity and continuity concepts to both technical and executive audiences.

• Bachelor’s degree or higher in Cybersecurity, Information Assurance, Information Security, Information Technology, Computer Science, Management Information Systems, Business Continuity, Emergency Management, Risk Management, Business Administration, Technical Communication, or a related technical or management field.

• Preferred qualifications include experience supporting HHS, IHS, or other U.S. federal agencies; nationwide or geographically distributed federal programs; NIST RMF, NIST CSF 2.0, FISMA, federal continuity requirements, and NIST IR 8286; relevant certifications such as CISSP, CISM, CRISC, CBCP, CBCI, or PMP; advanced proficiency in Microsoft Office; and a master’s degree.

🏝️ Benefits

• Comprehensive medical, dental, and vision insurance, in addition to telehealth services and a confidential Employee Assistance Program.

• Paid time off beginning at 3.5 weeks annually, increasing with service duration, plus 11 paid holidays.

• 401(k) retirement plan with an employer match of up to 4% of eligible compensation after six months of employment.

• Company-funded basic life insurance, accidental death and dismemberment coverage, and short- and long-term disability insurance.

• Opportunities for professional development and tuition reimbursement programs, each offering up to $1,500 annually for eligible employees after six months of service, subject to approval.