Enterprise Incident and Resilience Manager

Company Overview Detego Health's mission is to connect real-life needs with innovative product design, delivering affordable, approachable health care benefits that feel personal, while deeply understanding our members and partners to improve lives and redefine access to health care.

We're looking for passionate people who want to make a difference and help us redefine access to health care for individuals and small businesses by delivering certainty, connection and significance where others won’t.Ready to build something great together? Join a team that values growth, collaboration and the unique perspective you bring.

Position Summary Detego Health is building its enterprise resilience capability, and we are looking for an Enterprise Incident and Resilience Manager to lead it. This is a rare opportunity to own two connected disciplines end to end: how the organization responds when something goes wrong, and how it prepares to keep operating through disruption. You will stand up and mature both the incident management function and the business continuity program, shaping how a growing healthcare organization stays reliable, compliant, and ready as its systems and technology scale.

This is a build role for an experienced leader who wants ownership rather than a maintenance seat. You will design the processes, write the plans, run the response, and prove the whole thing works. If you are energized by taking a function from foundational to mature and want your judgment to shape it, this role is for you.

Key Responsibilities Own Incident Management End to End Serve as the single accountable owner for enterprise incident management across security, privacy, operational, technology, and third-party events.

Design and continuously improve the incident lifecycle, including intake, triage, severity classification, escalation, response coordination, communication, closure, and post-incident review.

Coordinate cross-functional response with technical, privacy, legal, clinical, operational, and vendor partners, ensuring clear ownership, timelines, and follow-through.

Run incident bridges and deliver timely, accurate, role-appropriate updates to stakeholders and executive leadership during active events.

Lead post-incident reviews and root cause analysis, and drive prevention-focused improvements that reduce repeat incidents.

Build and Mature the Business Continuity Program Establish and own the enterprise business continuity and resilience program, building it from a foundational baseline to a tested, repeatable capability.

Conduct business impact analysis to identify critical functions, dependencies, and acceptable downtime, and define recovery time and recovery point objectives with business owners.

Develop, document, and maintain business continuity and disaster recovery plans for the organization's most critical functions.

Design and facilitate tabletop exercises and continuity testing, capturing lessons learned and feeding them back into the plans.

Map cross-functional dependencies and establish the annual review cadence that keeps continuity plans current as the business evolves.

Communication, Documentation, and Audit Readiness Coordinate incident and continuity communications with legal, privacy, and leadership so messaging is controlled and aligned with regulatory and contractual obligations.

Maintain complete, audit-ready incident and continuity records, including timelines, artifacts, decisions, and resolution outcomes.

Ensure documentation supports SOC 2, HIPAA, URAC, and client audit expectations, and track corrective actions to closure with evidence retained.

Produce post-incident summaries, executive readouts, and continuity reporting that support governance forums and continuous improvement.

Emerging Technology and AI-Enabled Operations Integrate AI-related incidents into standard incident management, with clear ownership, escalation thresholds, and evidence requirements.

Partner with technical owners to ensure AI-driven workflows have monitoring, containment, and rollback procedures appropriate to their risk.

Use AI-enabled tooling to support detection, correlation, and timeline reconstruction while retaining human accountability for decisions and outcomes.

Qualifications6 to 10 or more years of experience across incident management, business continuity, security operations, IT operations, or enterprise risk, with demonstrated ownership of incident response and continuity or resilience work.

Proven ability to lead incident…