Position SummaryDataSpring is seeking a Business Continuity and Risk Management Director responsible for defining and advancing the enterprise strategy, governance framework, and organizational standards for business continuity and risk management. This role serves as DataSpring's recognized subject matter expert on operational resilience and partners with senior leaders across the organization to strengthen preparedness, reduce organizational risk, and ensure continuity of critical operations during disruptive events. The role blends strategic planning, risk management, and cross-functional leadership to build resilience and maintain operational stability.
The Director develops enterprise-wide approaches to business continuity, risk assessment, crisis management, and resilience planning while influencing strategic decisions that impact operational stability, client commitments, regulatory requirements, and organizational growth. This position leads through expertise, strategic influence, and organizational credibility rather than direct people management.
The Business Continuity and Risk Management Director is a
full-time, remote, exempt position and reports to the VP, Business Operations.
Specific ResponsibilitiesEnterprise Strategy & Governance- Define and evolve DataSpring's enterprise business continuity and risk management strategy to support organizational objectives and operational resilience.
- Establish organizational standards, governance frameworks, policies, and best practices related to continuity planning, risk management, and crisis preparedness.
- Identify emerging risks, industry trends, and evolving regulatory requirements and provide strategic leadership to ensure organizational readiness and compliance.
- Develop enterprise roadmaps and priorities that strengthen resilience capabilities and organizational readiness.
Business Continuity Leadership- Establish and maintain the enterprise framework for Business Continuity Planning (BCP) across the organization.
- Provide strategic oversight of business continuity activities and ensure alignment with industry standards including ISO 22301 and NIST 800-34.
- Evaluate continuity capabilities across business functions and drive improvements that enhance organizational resilience.
- Guide continuity planning efforts for critical business processes, services, and operational dependencies.
- Establish and oversee continuity testing, tabletop exercises, simulations, and recovery validation activities to evaluate organizational readiness and drive continuous improvement.
Enterprise Risk Management- Define enterprise approaches for risk identification, assessment, mitigation, monitoring, and reporting.
- Lead enterprise Business Impact Analysis (BIA) methodologies, standards, and assessments to identify critical business functions, operational dependencies, recovery priorities, and organizational risk exposure.
- Oversee risk management processes including risk registers, incident management practices, risk control self-assessments (RCSAs), and issue management frameworks.
- Assess organizational risk exposure and recommend mitigation strategies that support business objectives.
Crisis Management & Organizational Resilience- Establish enterprise crisis management frameworks, response protocols, escalation procedures, and governance structures.
- Serve as the organization's senior advisor on continuity and resilience matters during disruptive events.
- Provide strategic guidance to leadership regarding operational impacts, recovery priorities, and organizational response actions.
- Lead post-incident reviews and drive continuous improvement initiatives that strengthen organizational preparedness.
Cross-Functional Influence & Partnership- Partner with leaders across operations, technology, legal, compliance, finance, product development, and information security to integrate resilience and risk management into business planning and decision-making.
- Influence organizational priorities by providing expert guidance on business continuity, operational risk, and resilience considerations.
- Collaborate with technology leadership to align disaster recovery capabilities, recovery objectives, and resilience strategies.
- Build strong relationships with clients, vendors, auditors, and regulatory stakeholders on matters related to business continuity and risk management.
- Assess and influence third-party resilience capabilities, vendor dependencies, and continuity obligations that may impact critical business operations.
Organizational Capability Building- Develop enterprise training, awareness, and preparedness programs that strengthen continuity and risk management capabilities across the organization.
- Establish metrics, performance indicators, and reporting frameworks that provide leadership visibility into organizational resilience and risk posture.
- Promote a culture of preparedness, accountability, and proactive risk management throughout DataSpring.
- Mentor leaders and cross-functional partners on continuity planning, risk assessment, and resilience best practices.
Skills- Deep expertise in business continuity planning, operational resilience, enterprise risk management, crisis management, and disaster recovery principles.
- Strong understanding of continuity and risk management frameworks including ISO 22301, NIST, and related industry standards.
- Ability to evaluate organizational risk and develop strategic recommendations aligned with business objectives.
- Recognized subject matter expertise in business continuity and risk management.
- Exceptional communication and executive-facing presentation skills.
- Strong strategic thinking, influence, facilitation, and decision-support capabilities.
- Ability to lead through expertise and credibility across all levels of the organization.
Experience & Education- 10+ years of experience in business continuity, risk management, operational resilience, compliance, information security, or related disciplines.
- Demonstrated experience establishing enterprise-wide continuity, resilience, or risk management frameworks.
- Proven success influencing senior leaders and driving cross-functional initiatives in complex organizations.
- Experience advising executive stakeholders on organizational risk, business continuity, and crisis management strategies.
- Bachelor's degree in Business Administration, Information Technology, Risk Management, or a related field required. Master's degree preferred.
- Certified Business Continuity Professional (CBCP), MBCI, CRISC, CISM, PMP, or other related certifications preferred.
The pay range for this role is:
195,000 - 215,000 USD per year (Remote, United States)
