Senior Operational Risk Analyst (Tech Resilience)

Overview

Assist in strengthening the organization's ability to withstand and recover from technology disruptions that impact critical business services. Operating within the Business Continuity and Business Resiliency program, this role bridges business impact expectations with realworld technology recovery capabilities.

Provide independent second-line oversight and challenge of technology resiliency capabilities, including recovery strategies, testing outcomes, and dependency management, to ensure alignment with business resiliency expectations.

Responsibilities

• Support the development, maintenance, and continuous improvement of the Technology

  Resiliency framework within the broader Business Continuity and Business Resiliency program.

• Provide independent secondline oversight and challenge of technology resiliency practices, including IT disaster recovery plans, technology continuity strategies, and recovery testing activities executed by firstline teams.
• Identify and assess technology resiliency risks, including operational, design, and process deficiencies, and determine improvement opportunities aligned to business and regulatory expectations.
• Translate enterprise resiliency principles into clear, riskbased guidance to promote consistent application across technology teams while allowing flexibility based on system criticality and architecture.
• Assess alignment between businessdefined recovery expectations and technology capabilities by reviewing critical services and their supporting applications, infrastructure, data, and thirdparty dependencies.
• Review and challenge technology recovery and resilience strategies, including disaster recovery, high availability, backup, and failover solutions, to identify single points of failure, concentration risks, and architectural weaknesses that could impact service availability, continuity, or recoverability.
• Provide riskbased recommendations that balance resiliency outcomes with cost, complexity, and operational feasibility.
• Review, challenge, and validate the results of technology recovery testing and resilience exercises, and escalate material gaps where recovery capabilities do not meet business needs.
• As part of Third Party Risk Management, perform assessments of thirdparty services, evaluating vendor recovery strategies, testing evidence, dependency transparency, and alignment to enterprise resiliency requirements.
• Provide leadership with clear, riskbased insights into the organization's overall technology resiliency posture, including emerging risks, trends, and areas requiring escalation or remediation.
• Assist in drafting and maintaining Technology Resiliency governance directives, and partner with senior leaders to socialize, vet, publish, and monitor adherence across the organization.

Qualifications

Required Qualifications

• Bachelor's degree in Information Technology, Risk Management, Business, or equivalent combination of training, education and experience.
• Experience in highly regulated industries (finance, healthcare, critical infrastructure) or large distributed enterprise environments.
• Experience in technology, IT operations, architecture, business continuity, disaster recovery or technology risk
• Strong understanding of application, infrastructure, and data architectures and dependencies, and how they support service resilience and recovery during disruptions
• Experience assessing thirdparty business continuity and disaster recovery capabilities
• Knowledge of risk and resilience frameworks: FFIEC, ISO 22301, NIST SP 800-34, ISO 27001
• Ability to translate technical concepts into business impact and risk language
• Advanced organizational, planning, and time management skills

Desired Qualifications

• Master's Degree in a related field or an equivalent combination of training, education, and experience that provided exposure to or management of ORM-related risk domains.
• Experience with cloud platforms (AWS, Azure, GCP) and related resiliency tooling (replication, multi-region architectures, backup automation.
• Relevant field certifications such as MBCP, CBCP, CCRP, CRISC, CISM, SRE, Certified Solutions Architect (AWS, Azure), etc.
• Experience in Financial Services, First, Second, and/or Third Line Risk Management

Hours: Monday - Friday, 8:00AM - 4:30PM
Location: 820 Follin Lane, Vienna, VA 22180 | 5510 Heritage Oaks Drive, Pensacola, FL 32526

About Us