Disaster Recovery Analyst - Governance, Risk & Compliance

Your Opportunity:

The Disaster Recovery Analyst – Governance, Risk & Compliance (GRC) provides Tier‑2 operational support within the Information Risk Management team, with a focus on IT Disaster Recovery (DR) activities. In this role, the Disaster Recovery Analyst partners with IT application and infrastructure teams to ensure disaster recovery plans are prepared, maintained, and tested to support the timely restoration of systems following an outage or disaster.

This role consults with stakeholders to provide guidance on IT disaster recovery processes, with a focus on planning, recovery requirements, and operational readiness. The Analyst also supports maintenance of the IT and Cybersecurity Risk Register and contributes to reporting on risks, issues, and mitigation activities.

Description:

This role supports IT Disaster Recovery (DR) readiness, operational support, risk management, and cross-functional collaboration across teams.

Responsibilities include:

Ensuring IT disaster recovery plans are developed, maintained, and tested for critical applications and infrastructure. This includes coordinating annual validation and testing, guiding the definition of recovery objectives (RPO, RTO, MTO), and ensuring the CMDB reflects system criticality and recovery requirements. Providing advisory and operational support for disaster recovery. Acting as a key point of contact for DR-related inquiries, the Disaster Recovery Analyst participates in tabletop exercises, supports service design by assessing DR requirements, and delivers Tier‑2 operational support for service requests related to DR plans and recovery objectives.

Supporting the IT & Cybersecurity Risk Register. This includes working with risk owners and leads to maintain current risk, issue, and mitigation information, and contributing to regular reporting on risk status. Promoting collaboration and knowledge sharing. The Analyst stays current with disaster recovery and cybersecurity best practices, shares insights across IT and partner groups (, Emergency Disaster Management), and participates in training, exercises, and awareness initiatives to strengthen organizational resilience and security culture.

Knowledge of business continuity and disaster recovery frameworks such as ISO 22301 and ISO 27031. Knowledge of industry best practices with respect to disciplines in major accountability areas identified above. Good communications skills:
Able to effectively communicate with internal and external stakeholders, both in technical and business terms. Understanding of security/compliance related IT industry standards and frameworks.

Related IT certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC).