About the role

Assistant Vice President – Business Continuity & Cyber Resiliency

Position Overview

The Assistant Vice President – Business Continuity & Cyber Resiliency is responsible for driving enterprise-wide resilience, with a strong focus on cyber disruption preparedness and managing large-scale crisis events. This position plays a hands-on role during enterprise-wide crisis events, including cyberattacks, technology outages, geopolitical events, civic disturbances, and large-scale operational disruptions.

Cyber Resiliency

Partner with: Cyber, Technology, Infrastructure, Application Owners, Cloud, and third parties to define cyber recovery objectives (RTO/RPO), prioritized service recovery, and dependency mapping.
Lead adoption of: cyber resiliency practices, immutable and air-gapped backups, clean-room recovery, secure identity recovery, and restoration validation.
Ensure: cyber crisis response playbooks are fully integrated across Incident Response, Crisis Management, DR, Legal, Compliance, Communications, and Executive leadership.
Drive: regular cyber recovery simulations (table-top and technical); track corrective actions through closure and report readiness to governance forums.

Business Continuity

Lead: implementation, and continuous enhancement of enterprise Business Continuity, Disaster Recovery, and Cyber Resiliency frameworks aligned to ISO 22301 and leading resilience standards.
Act as a primary point of contact for: client assurance, regulatory reviews, audits, RFPs/RFIs, and resilience capability demonstrations.
Drive: organization-wide Business Impact Assessments (BIA), risk assessments, and threat modeling to identify critical services, recovery priorities, and systemic vulnerabilities.
Identify and remediate: Single Points of Failure (SPOFs) across business processes, technology, people, and third-party dependencies.

Crisis Management

Lead and coordinate: large-scale enterprise crisis response, acting as a core member of the Crisis Management Team during high-impact events.
Manage crises: including cyber incidents, technology outages, infrastructure failures, civil disturbances, natural disasters, and geopolitical disruptions, ensuring controlled escalation and decision-making.
Oversee: development, testing, and execution of Crisis Management Plans, Emergency Response Plans, and Command Center protocols.

Qualifications

8–15 years of overall experience, with hands-on experience in working closely with Information Security, Cyber Defense, SOC and Incident Response.
Proven experience managing complex, high-pressure, multi-stakeholder crisis events, including cyber incidents.
Strong working knowledge of ISO 22301, BCM lifecycle, cyber recovery models, and integrated crisis response.
Certifications such as ISO 22301, CISSP, CISM, CBCI, MBCI or equivalent strongly preferred.
Executive-level communication skills with the ability to operate confidently during crisis situations.

Cyber resiliency