Business Continuity Analyst; Governance & Risk

Business Continuity Analyst (Governance & Risk)

Business Continuity Consultant (Governance & Risk)

Join a leading insurance organization and play a key role in strengthening business continuity, operational resilience, and risk governance practices. This opportunity is ideal for professionals with Business Continuity Management (BCM) experience who enjoy reviewing, challenging, and improving business continuity programs while working closely with stakeholders across the organization.

• Salaried: $48-54 per hour.
• Incorporated Business Rate: $57-63 per hour.
• 6-month contract with the potential for permanent employment.
• Weekday schedule from 9 am to 5 pm.
• Hybrid role: 2 days per week in office (subject to change).

• Review and challenge Business Impact Assessments (BIAs), Business Continuity Plans (BCPs), recovery documentation, and testing results to ensure completeness, accuracy, and alignment with business operations.
• Support Business Continuity Management, Disaster Recovery, and Operational Resilience programs within a governance and risk management framework.
• Provide recommendations and guidance to business partners to strengthen continuity and resilience capabilities.
• Assist business units in maintaining effective recovery strategies and continuity plans to support critical business functions.
• Work with cross-functional stakeholders to identify dependencies, risks, and gaps impacting business continuity and operational resilience.
• Support the development, maintenance, and continuous improvement of business continuity procedures, standards, and governance frameworks.
• Collaborate with risk, resilience, crisis management, and disaster recovery teams to ensure alignment across continuity initiatives.
• Participate in tabletop exercises, continuity testing activities, scenario reviews, and recovery validation processes.
• Monitor compliance with internal policies, regulatory expectations, and industry best practices.
• Review third‑party continuity documentation, resilience assessments, contingency plans, and related evidence.
• Track remediation activities, action items, and business unit deliverables to ensure timely completion.
• Prepare reports, dashboards, KPI/KRI metrics, and management updates related to program performance and compliance.
• Support training, coaching, and awareness activities related to Business Continuity Management and Operational Resilience.

• University degree in Computer Science, Management Information Systems, Business Administration, Risk Management, or a related field, or equivalent practical experience.
• Business Continuity, Disaster Recovery, Risk Management, PMP, PMI, CBCP, CBCI, or related professional certifications are considered assets.
• 3+ years of experience in Business Continuity Management (BCM), Disaster Recovery (DR), Operational Resilience, Crisis Management, or related risk functions.
• Hands‑on experience reviewing or supporting Business Impact Assessments (BIA), Business Continuity Plans (BCP), recovery plans, and continuity testing activities.
• Experience working within financial services, insurance, banking, or other highly regulated industries.
• Knowledge of business continuity, disaster recovery, operational resilience, and risk management principles.
• Strong analytical, reporting, documentation, and problem‑solving capabilities.
• Excellent written and verbal communication skills with the ability to engage stakeholders across business and technology teams.
• Experience facilitating meetings, conducting reviews, providing recommendations, and supporting training initiatives.
• Highly organized with strong attention to detail and the ability to manage multiple priorities.
• Experience working in governance, compliance, quality assurance, audit, or second‑line risk environments is considered an asset.
• Knowledge of operational resilience frameworks, regulatory expectations, and industry best practices is considered an asset.
• Experience with Fusion Risk Management (Fusion RM), Service Now, Archer, or similar governance/risk platforms is considered an asset.
• Knowledge of risk management frameworks, including the three lines of defence model, is considered an asset.
• Experience working with technology recovery, cloud environments, third‑party risk, or resilience testing activities is considered an asset.