Role Description:

Engineer resilience and recoverability against cyber-attack into the design, implementation, operation and management of the systems that support AMP's essential functions. You will define business resilience requirements as measurable recovery objectives (RTO/RPO) and design, implement and operate the technology controls that back up, replicate and recover information and services in line with those requirements. This includes owning backup and immutable/isolated recovery architectures, failover and failback processes, and leading data restoration exercises, including routine backups and the ongoing maintenance, integrity checking and restore testing of existing backups, so that data and critical services remain protected, verifiable and rapidly recoverable following ransomware, corruption or infrastructure loss.

You will work closely with the IT team to align disaster recovery to the broader operational resilience frameworks and assess, develop, and deliver innovative cyber resilient solutions to protect AMPs critical business activities.

Key Responsibilities:

• Demonstrate commitment to the AMP core values through upholding our standards of business conduct, complying with business policies & procedures, and leading by example.
• Establish a working environment which promotes the importance of employees acting with integrity and in an ethical manner in line with the Code of Conduct
• Build and embed AMP's ability to prevent, respond to and recover from operational risks and their impacts through the development and delivery of a comprehensive Technology Resilience strategy, aligned with the organization's strategic objectives and regulatory requirements
• Be the subject matter expert, becoming a trusted partner to the business, keeping up to date with latest developments and innovation in this field
• Define, document, update and disseminate an IT Disaster Recovery (DR) plan(s) by developing technical recovery plans for business-critical services (including applications and infrastructure) for executing required technology and infrastructure recovery processes, including Operational Technology after a disruption, compromise, or failure.
• Test established IT DR plan(s), including tests of recovery point objectives against cyber scenarios to verify operational effectiveness and the readiness to execute the plan(s)
• Test the operational effectiveness of defined DR plans through checklists, walk-throughs, tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises in coordination with related plans (e.g. IT DR plans and crisis management plans)
• Incorporate cybersecurity scenarios, the review of test outcomes, implementation of the lessons learned and required improvements/corrective actions into IT DR and Cyber Resilience plans
• Review DR plan test results and implement required corrective actions, if needed, leading a Technology Resilience board and making recommendations for remedial actions
• Provide oversight on the execution of AMP's disaster recovery plan in the event of a disaster and enable AMP to respond quickly to a loss of capability through cyber attack, damage to infrastructure or any other cause
• Review and test the disaster recovery plan to ensure critical IT services can be restored during a crisis
• Oversee the implementation of the annual training testing plan for the Disaster Recovery capability to ensure it remains fit for purpose and can be managed
• Provide development and oversight to AMP's Disaster Recovery function ensuring governance alignment with the resilience framework, with a focus on ITs response and recovery capabilities
• Oversee the delivery of Disaster Recovery controls across IT, operations and the wider business
• Ensure the development of appropriate resilience and continuity plans, policies, and procedures for major systems failures against threats and vulnerabilities

Requirements:

• A Bachelors degree (or equivalent) in a technical area, preferably in a programming or computer science discipline.
• A baseline level of knowledge on the following frameworks: NIST CSF, ISO 27001/27002 and COBIT
• One of the following certifications for example: CompTIA Network +, CompTIA Security +, CISM, CISSP or COBIT 5
• Knowledge or understanding of Manufacturing Security, Manufacturing Operations and Operational Technology Security, with capabilities to safeguard and remediate IT and operational vulnerabilities

The anticipated base annual salary range for this role is between $95,900.00 and $143,900.00 per year. This role is bonus eligible. The bonus incentive program is based on the company meeting or exceeding certain targets. Please note that the salary range provided is a good faith estimate and is only applicable for roles that are based out of Illinois. The final salary will be determined after considering relevant factors, including, but not limited to, a candidate's qualifications, experience, and work location, where appropriate.

Benefits Offered:

• Medical, prescription, dental and vision plans
• Flexible Spending Accounts (FSA)
• Life insurance
• 401(k) retirement plan with company match
• Paid holidays and vacation
• Short- and Long-Term Disability (STD/LTD)
• Employee Assistance Program (EAP)
• Apprenticeship programs
• Professional and personal development opportunities through Employee Resource Groups

Please note the compensation and benefits information above is accurate as of the date of this posting. Ardagh reserves the right to modify this information at any time in accordance with applicable law.