Business Continuity/Disaster Recovery (BC/DR) & Compliance/Security Director (Finance)

We are seeking a skilled and versatile individual to serve as our BC/DR & Compliance/Security Director, with a primary focus on compliance and security in addition to business continuity and disaster recovery. This role will require in-depth expertise in compliance standards and security protocols, ensuring that both areas are effectively managed across the organization. The individual will be responsible for overseeing the development and execution of compliance programs and security measures to safeguard critical data and systems. The role will also involve ensuring adherence to industry regulations (such as ISO 27001, SOC, HIPAA) and working closely with stakeholders to maintain a secure and compliant operational environment. Strong presentation and communication skills are essential to engage senior leadership and communicate complex compliance and security issues effectively.

ESSENTIAL DUTIES AND RESPONSIBILITIES

BUSINESS CONTINUITY AND DISASTER RECOVERY:

Develop, maintain, and implement business continuity and disaster recovery (BC/DR) plans, such as EAP, IMP, CMP, BIA, playbooks and so on across various departments, including infrastructure, client operations, and facilities services.

Act as the lead coordinator during emergency situations, ensuring smooth execution of recovery plans and alternate operating strategies.

Familiarity with and conducting table top exercises and BC/DR exercises including, analyzing and testing existing BC/DR plans, identifying areas of improvement and ensuring updates align with evolving business and IT needs.

Collaborate with cross-functional teams to ensure that BC/DR strategies are aligned with overall business operations.

Compliance and Security

Oversee and ensure compliance with applicable regulations and standards, particularly related to data security and disaster recovery.

Act as the key liaison for internal and external audits, providing required documentation and addressing any security or compliance concerns.

Work closely with security teams to implement security controls, including access management, risk assessments, and compliance reporting.

Ensure policies are in place to safeguard critical data and systems during an emergency or disaster situation.

Must have knowledge of ISO 27001, SOC, HIPAA compliance standards and controls as it relates to BC/DR

Ability to assist in audits, controls, and compliance reporting.

TRAINING AND PRESENTATIONS

Develop and deliver training programs related to business continuity, disaster recovery, compliance, and security protocols.

Present findings, updates, and strategic plans to senior leadership, making complex topics accessible and actionable for non-technical stakeholders.

Prepare and present business continuity, security, and compliance reports to various teams and external auditors.

REQUIRED SKILLS AND ABILITIES

• Strong understanding and hands on experience of business continuity, disaster recovery, and security principles.
• Extensive knowledge of compliance standards, including ISO 27001, SOC, HIPAA, and other industry regulations.
• Expertise in IT infrastructure, disaster recovery tools, and security protocols.
• Excellent presentation and communication skills, with the ability to deliver clear, impactful messages to senior management and stakeholders.
• Ability to remain calm under pressure and lead efforts during high-stress situations, ensuring recovery efforts are executed smoothly.
• Strong organizational, project management, and problem-solving skills.
  Ability to assist with audits, controls, and compliance activities.
• Ability to work flexible hours, including weekends or after-hours, if necessary, especially, during testing and recovery exercises.

NICE TO HAVE

Certified Business Continuity Professional (CBCP), Certified Information Systems Security Professional (CISSP), or equivalent certifications.

KNOWLEDGE, EXPERIENCE AND/OR EDUCATION REQUIREMENTS

• Bachelor's degree in computer science, Information Security, Business Administration, or a related field. Equivalent work experience may be considered.
• At least 5-6 years of experience in business continuity, disaster recovery, security, and compliance roles. Hands-on experience in developing and managing BC/DR plans, conducting risk assessments, and ensuring compliance with security frameworks and regulations.

Disclaimer: Managers have the right to assign or redesign the responsibilities of the above-mentioned job description without notice and at any timeEmpyrean is an Equal Opportunity Employer: including disability and veterans