Information Risk Manager, for Business Continuity and Disaster Recovery
Core
Lead independent second-line challenge and oversight of technology, data, and operational risks, with a specific focus on business continuity and disaster recovery resilience.
Role type
Senior Information Risk Manager (Business Continuity & Disaster Recovery)
Builds
Independent risk opinions, challenge reports, and validation of risk mitigation plans for technology and operational resilience.
Domain
Financial Services / Information Risk / Business Continuity
Deliverable
client delivery
Required skills
Information risk assessment, Business Continuity Planning (BCP), Disaster Recovery (DR) testing, Root Cause Analysis (RCA), Risk Control Self-Assessment (RCSA), Regulatory framework knowledge (ISO, NIST, COBIT, OSFI), GRC platform usage, Architecture change risk evaluation, Incident management.
Preferred skills
Generative AI risk assessment, Agentic AI risk assessment, Continuous monitoring technologies.
Technologies
Archer, ServiceNow, Fusion
Responsibilities
Provide independent second-line challenge of first-line risk assessments and controls; Assess adequacy of technology and operational risk practices against regulatory standards; Develop evidence-based risk opinions and escalate material issues; Perform deep-dive RCSA reviews and challenge risk ratings; Review major technology initiatives for risk impacts and mitigation sufficiency; Evaluate risks associated with architecture changes and new solutions; Review incidents, RCA quality, and recurrence prevention measures; Assess and challenge risk acceptances and corrective action plans; Validate CAP closure evidence; Review business continuity plans and DR test results to challenge gaps and assumptions.
Seniority
Mid-Senior, hands-on IC