What are the responsibilities and job description for the Business Continuity Manager, Information Security position at Ryan?
Why Ryan?
People
Duties and Responsibilities aligned with Key Results:
Job duties are to be conducted in a manner that adheres to privacy laws, as well as follows internal governance related to protecting confidential information and trade secrets, and to securing data and company records.
Work Environment
- Hybrid Work Options
- Award-Winning Culture
- Generous Personal Time Off (PTO) Benefits
- 14-Weeks of 100% Paid Leave for New Parents (Adoption Included)
- Monthly Gym Membership Reimbursement OR Gym Equipment Reimbursement
- Benefits Eligibility Effective Day One
- 401K with Employer Match
- Tuition Reimbursement After One Year of Service
- Fertility Assistance Program
- Four-Week Company-Paid Sabbatical Eligibility After Five Years of Service
People
Duties and Responsibilities aligned with Key Results:
- Create a positive team member experience.
- Will lead business continuity team activities, including coordination of planning, testing, and response efforts.
- Provide leadership for the work group through subject matter expertise in business continuity, crisis management, and resilience planning.
- Support Vice President, Risk and Governance/Information Security to develop and maintain a comprehensive business continuity program aligned to enterprise risk priorities.
- Promote a culture of resilience and preparedness across the organization.
- Build relationships across practice areas to promote business continuity awareness and improve adoption of resilience practices.
- Partner with business units to identify critical processes and ensure continuity strategies meet operational and client service expectations.
- Ensure continuity capabilities support the protection of client commitments and service delivery during disruptive events.
- Develop, implement, and maintain the Firm’s Business Continuity Management (BCM) program.
- Conduct Business Impact Analyses (BIA) and risk assessments to identify critical functions, dependencies, and recovery requirements.
- Coordinate and lead business continuity testing exercises, including tabletop, simulation, and technical recovery tests.
- Analyze test results and drive continuous improvement through corrective actions and program enhancements.
- Establish and maintain crisis management and incident response coordination processes for business disruptions.
- Ensure continuity plans are documented, maintained, and aligned with business and regulatory requirements.
- Collaborate with IT to ensure alignment between business continuity and disaster recovery strategies, including system recovery objectives (RTO/RPO).
- Support third-party risk management efforts by evaluating vendor continuity capabilities.
- Provide reporting and metrics on program maturity, risks, and testing outcomes to leadership.
- Assist with the selection and implementation of business continuity tools and technologies.
- Support enterprise governance, risk management, and compliance (GRC) initiatives related to resilience and operational risk.
- Assist with development, implementation, and execution of policies and procedures to ensure operational resilience and regulatory compliance.
- Assist coordination efforts during actual disruption events, ensuring effective communication and recovery execution.
- Manage continuity-related projects and provide expert guidance on resilience matters for broader organizational initiatives.
- Other work or projects as assigned.
- Bachelor’s or master’s degree in business administration, risk management, information systems, or a related field.
- 5–7 years of experience in business continuity, disaster recovery, risk management, or related disciplines.
- Experience conducting Business Impact Analyses (BIA), risk assessments, and continuity planning.
- One or more years of managerial or program leadership experience preferred.
- Experience coordinating crisis management or incident response activities.
- Familiarity with IT disaster recovery concepts, infrastructure, and cloud environments.
- Experience with business continuity tools and planning platforms is a plus.
- Experience with regulatory and compliance requirements related to operational resilience.
- Knowledge of frameworks such as ISO 22301, NIST, FFIEC, or similar resilience and continuity standards.
- Experience integrating business continuity with enterprise risk management and cybersecurity programs.
- Accredited certifications a plus, such as: CBCP (Certified Business Continuity Professional), MBCI, CRISC, CISM, or similar.
- Advanced in all Microsoft Office applications.
- Experience with continuity planning or GRC platforms preferred.
Job duties are to be conducted in a manner that adheres to privacy laws, as well as follows internal governance related to protecting confidential information and trade secrets, and to securing data and company records.
Work Environment
- Standard indoor working environment.
- Position requires regular interaction with employees at all levels of the Firm and coordination with external vendors and partners.
- Occasional long periods of sitting while working at a computer.
- Must be able to lift, carry, push, or pull up to 15 lbs.
- Travel requirement: less than 10%.