Senior Manager, Enterprise Resilience & Service Recovery

Location: Waltham, MA (Hybrid)

Targeted Salary Range: $200,000 to $240,000 annually

Reports To: VP, Information Security & Infrastructure Operations

Department: Information Security & Infrastructure Operations

Position Summary

The Senior Manager, Enterprise Resilience & Service Recovery is the hands-on enterprise capability owner responsible for developing, operating, and continuously improving Nova Biomedical's business continuity, disaster recovery, cyber recovery, operational resilience, crisis readiness, and major incident management capabilities. The role establishes a unified approach for preparing for disruption, protecting critical operations, coordinating response, restoring services, validating recovery, and converting lessons into measurable improvement.

The position serves as the enterprise Incident Commander for significant events regardless of origin, including cybersecurity incidents, infrastructure outages, cloud or application failures, identity disruptions, telecommunications issues, manufacturing technology interruptions, third-party service failures, facility events, and other conditions that materially affect business operations. The Senior Manager coordinates technical, business, executive, legal, quality, regulatory, communications, and supplier workstreams while maintaining a clear operating picture, decision cadence, recovery priorities, and accountable actions.

This is a player-coach role. The Senior Manager provides enterprise leadership and governance while remaining directly involved in business impact analysis, service criticality, dependency mapping, recovery architecture, plan development, technical testing, exercise facilitation, incident command, status communications, post-incident review, automation design, evidence review, remediation, and capability development.

Role Mission

Build and mature an integrated enterprise resilience and incident management capability that enables critical operations to anticipate, withstand, respond to, recover from, and learn from disruption. Engineer recoverability into services and workflows, make incident response consistent across cyber and technology operations, automate repeatable work wherever practical, and replace undocumented knowledge and untested assumptions with clear ownership, reusable playbooks, observable services, and evidence-based recovery confidence.

Work Architecture View

This role is designed around capability ownership and business outcomes rather than the administration of isolated plans. It owns the system of work connecting business services, tasks, workflows, skills, technology, dependencies, risks, recovery objectives, incident decisions, recovery actions, evidence, and continuous improvement.

The role redesigns work so people can focus on judgment, coordination, architecture, and complex problem-solving while automation and intelligent tools support data collection, readiness checks, workflow orchestration, communications, knowledge retrieval, evidence generation, and recurring validation.

Core Outcomes

• Maintain practical continuity strategies for critical business, manufacturing, laboratory, and corporate services.
• Improve recovery confidence through tested architecture, current playbooks, known dependencies, assigned ownership, trained teams, and reviewable evidence.
• Establish a consistent command structure for high-severity events across cybersecurity, infrastructure, cloud, applications, suppliers, facilities, and business operations.
• Improve service restoration by quickly establishing business priorities, mobilizing the appropriate capabilities, managing dependencies, and supporting timely decisions.
• Strengthen cyber recovery readiness for identity compromise, ransomware, destructive attacks, unavailable tools, untrusted infrastructure, malicious persistence, and restoration from known-good sources.
• Increase the use of automation and governed AI assistance for readiness checks, workflow routing, evidence collection, status reporting, recovery validation, knowledge retrieval, and repeatable response activities.
• Incorporate resilience and recoverability requirements into new and changed services before deployment.
• Provide accountable leaders with measurable visibility into criticality, recovery objectives, incident performance, testing coverage, material gaps, exceptions, remediation, and risk acceptance.
• Ensure incidents, exercises, tests, audit findings, and supplier disruptions result in assigned improvements that reduce recurrence and strengthen future response and recovery.

Primary Workstreams

• Enterprise Resilience Strategy & Governance
• Business Continuity Management
• Disaster Recovery Engineering
• Cyber Recovery & Ransomware Resilience
• Major Incident Command & Control
• Incident Communications & Stakeholder Coordination
• Incident Detection, Readiness & Service Integration
• Backup, Restore & Recovery Governance
• Recovery Automation, Orchestration & Intelligent Operations
• Resilience Architecture & Design Review
• Testing, Exercises & Continuous Validation
• Manufacturing, Site & Operational Resilience
• Third-Party & Supplier Resilience
• Post-Incident Review, Problem Management & Learning
• Team Leadership & Capability Development
• Metrics, Evidence & Continuous Improvement

Essential Responsibilities

Enterprise Resilience Strategy & Governance

• Own and maintain the enterprise resilience and major incident management roadmap, operating model, standards, governance, testing framework, maturity priorities, metrics, and executive reporting.
• Establish accountability for business continuity, disaster recovery, cyber recovery, backup integrity, service recoverability, incident command, crisis coordination, exercises, remediation, exception management, and risk acceptance.
• Define tiered minimum requirements for critical services, applications, infrastructure, cloud platforms, identity services, manufacturing technology, facilities, suppliers, and business processes based on business impact and risk.
• Integrate resilience requirements into architecture, service management, change management, supplier management, cybersecurity, quality, compliance, and technology lifecycle processes.
• Provide leadership with concise visibility into resilience posture, active incidents, recovery confidence, material gaps, overdue remediation, accepted risks, resource constraints, and investment priorities.

Business Continuity Management

• Lead and continuously improve business impact analysis, critical process identification, continuity planning, service prioritization, dependency mapping, and continuity strategy development across applicable global operations.
• Partner with business owners to define and validate recovery time objectives, recovery point objectives, maximum tolerable disruption, minimum service levels, staffing needs, alternate procedures, location requirements, communication needs, and third-party dependencies.
• Ensure continuity plans are practical during disruption, aligned with current operations, accessible when normal systems are unavailable, and integrated with technology recovery, crisis management, facilities, communications, quality, and supplier response.
• Facilitate plan reviews and scenario exercises that validate decisions, handoffs, workarounds, resources, contact paths, and operating assumptions.
• Create common templates, playbooks, data structures, ownership models, and review cycles that improve consistency without creating an unnecessary administrative burden.

Disaster Recovery Engineering

• Own the enterprise disaster recovery framework and partner with infrastructure, application, database, network, cloud, identity, manufacturing, and business teams to engineer recoverable services.
• Review recovery architecture, sequencing, dependencies, data protection, restoration methods, access requirements, operational runbooks, validation criteria, fallback options, and recovery evidence.
• Participate directly in recovery planning, technical tests, failover activities, issue diagnosis, restoration validation, remediation tracking, and the improvement of recovery procedures for critical services.
• Ensure recovery documentation reflects current architecture, identifies prerequisites and decision points, and can be executed by trained teams without relying on undocumented individual knowledge.
• Reconcile approved recovery objectives with demonstrated technical capabilities and escalate material gaps where current design, funding, staffing, contracts, or technology cannot meet business expectations.

Cyber Recovery & Ransomware Resilience

• Build and mature cyber recovery strategies that account for identity compromise, destructive activity, impaired administrative tools, malicious persistence, unavailable production networks, contaminated backups, and uncertain system trust.
• Partner with cybersecurity and infrastructure teams on the prioritized recovery of identity, privileged access, network control points, security tools, critical infrastructure, applications, data, collaboration services, and manufacturing operations.
• Define requirements for known-good recovery sources, backup immutability, isolation, protected administration, clean-room recovery, integrity validation, security validation, forensic preservation, and controlled return to service.
• Lead or support realistic cyber recovery exercises that test technical restoration, business prioritization, executive decisions, legal and regulatory coordination, communications, quality implications, and sustained operations during extended disruptions.

Major Incident Command & Control

• Serve as the Incident Commander, or designate and support an appropriate Incident Commander, for Severity 1 and other material incidents.
• Establish incident scope, business impact, command roles, technical workstreams, decision authority, communication cadence, escalation paths, recovery priorities, action tracking, and criteria for transitioning from response to recovery.
• Maintain a reliable operating picture that distinguishes confirmed facts, working hypotheses, unknowns, risks, dependencies, decisions, actions, owners, expected updates, and business consequences.
• Coordinate parallel technical and business workstreams while preventing duplicated effort, uncontrolled changes, conflicting communications, or premature restoration.
• Ensure incident decisions balance service restoration, security, safety, data integrity, product quality, regulatory obligations, customer impact, evidence preservation, and long-term operational stability.
• Provide calm, structured leadership during ambiguity and ensure teams can escalate constraints, request decisions, obtain resources, and communicate risks without delay.

Incident Communications & Stakeholder Coordination

• Establish communication standards and templates for technical responders, business leaders, executives, users, customers, suppliers, Legal, Privacy, Quality, Regulatory Affairs, Communications, and other stakeholders.
• Produce or coordinate timely situation reports that explain what is known, what remains unknown, the business impact, services affected, actions underway, decisions required, risks, workarounds, and the next planned update.
• Ensure communications are factual, appropriate for the intended audience, coordinated, and clearly distinguish operational status from determinations owned by other accountable functions.
• Maintain an incident record that supports operational handoffs, post-event review, regulatory or contractual needs, insurance support, evidence preservation, and executive understanding.

Incident Detection, Readiness & Service Integration

• Partner with service management, monitoring, observability, cybersecurity operations, engineering, and application teams to improve the recognition, declaration, severity assignment, routing, mobilization, and escalation of major incidents.
• Define practical activation criteria, on-call expectations, response roles, communication channels, bridge procedures, escalation matrices, and handoffs among the service desk, operations, security, engineering, vendors, and business teams.
• Align major incident management with problem management, change enablement, knowledge management, configuration and asset information, supplier escalation, and service ownership processes.
• Identify missing telemetry, ownership, documentation, access, tooling, or support coverage that delays diagnosis and recovery, and drive accountable remediation.

Backup, Restore & Recovery Governance

• Establish governance for backup coverage, retention, protection, monitoring, immutability, restore testing, ownership, exceptions, evidence, lifecycle alignment, and recovery dependency management.
• Partner with platform and application owners to validate that protected data and systems can be restored within approved objectives.
• Ensure prerequisites, credentials, network paths, software dependencies, and validation methods are understood.
• Drive remediation of unprotected assets, failed backups, untested restores, unsupported technology, excessive recovery complexity, and gaps between reported protection and demonstrated recoverability.
• Use recovery evidence and testing outcomes to distinguish theoretical backup availability from proven restoration and usable business service recovery.

Recovery Automation, Orchestration & Intelligent Operations

• Identify tasks suitable for simplification, orchestration, scripting, infrastructure as code, configuration automation, workflow integr