Business Continuity Plan Manager

Business Continuity Plan Manager

Location:

Salt Lake City, UT | Portland, OR

Company:
Pacifi Corp

Support a corporate-wide security assurance program that addresses business continuity management, incident management, security awareness, security policies, and compliance with regulatory and information system requirements. Implement business objectives, strategies, and plans.

• As a senior subject matter expert and lead specialist related to all aspects of business continuity practices, work with multiple business units regarding assessment of potential business impact of a disruption; identification and definition of critical, time-sensitive functions; and design, development and documentation of business unit recovery plans.
• Work with IT and Security to ensure that technology and cyber security plans align with business continuity plans.
• Create, implement, and maintain business recovery plans, security policies, standards, training programs, and processes in the corporate recovery planning tool.
• Ensure all applicable business recovery plans and cyber‑security incident response plans are documented and exercised according to applicable regulations (e.g., SOX, ISMS and CIP‑).
• Provide subject matter expertise on related regulatory requirements.
• Serve as the administrator of the corporate planning tool and as a liaison for Pacifi Corp business units. Primary approver and account holder for the Bold Planning application.
• Train business contacts on use of the business recovery and technology recovery planning tool.
• Develop and facilitate business and technology incident response and recovery exercises.
• Serve as lead planner within the Emergency Management team for Pacifi Corp for Grid Ex (coordinate BCPs, TRPs and outside agencies).
• Assist in the development and implementation of security awareness materials including presentations, phishing campaigns, bulletins and newsletter articles in coordination with the Corporate IT Disaster Recovery planner.
• Liaison with the Corporate Facilities team to maintain business recovery facilities and ensure that internal recovery sites are updated and functioning properly.
• Manage relationships for business recovery, emergency response and other security‑related services.
• Participate in the development of company strategies and mission‑critical technologies.
• Assist in the implementation and release of new and existing business recovery assessments, planning software and physical access control systems.
• Ensure projects are completed within committed time and budget.
• Coordinate with internal and external emergency management representatives and participate in federal, state, county and city agency planning activities and exercises.
• Submit documentation to audit and compliance for ISMS and EOP‑008 requirements (Distribute Change Control and final plan to Lead to share with Team Members or include Team Members in email).
• Document exercise plans, agenda and after‑action reports for exercises and incidents (evidence includes invitations, agenda, exercise plan or scenario presentation, post‑exercise review).
• Work with application owners to ensure all restoration exercises are conducted and proper documentation is included and available upon request for auditors and regulators.
• Create Team Verification process to ensure plans remain compliant.
• Participate in weekly BHE Incident Response Management, Emergency Resiliency, and BOLD Planning tool meetings.
• Participate in monthly IT Incident Command System planning and meetings.

• Bachelor’s degree in computer science, information technology, or related field; or equivalent work experience. (Typically, four years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor’s degree. A minimum of three years additional directly related technical experience is required.)
• Seven years of professional experience in business, technology recovery, emergency management and security planning.
• Experience in developing and conducting complex business response and recovery exercises.
• Knowledge of information and operational technology terms,…