Information Risk Management Analyst II

T he Information Risk Management Analyst II is responsible for coordinating and overseeing Business Continuity (BC) and Disaster Recovery (DR) planning and testing. This position plays a key role in ensuring regulatory compliance, managing evolving risk factors, and executing third-party exit and transition strategies. The role is critical in supporting the organization’s operational resilience and is temporarily assigned additional responsibilities during a leadership absence.

Key Responsibilities

• Ensure BC/DR plans comply with internal policies and external regulatory standards.
• Review and update continuity plans in response to business and risk changes.
• Implement and support global BC/DR processes across business units.
• Oversee third-party exit and transition planning; review SOC 2 reports.
• Conduct meetings with business and technology stakeholders to assess dependencies, risks, and gaps.
• Facilitate simulations and exercises to test DR capabilities and document outcomes.
• Align DR strategies with operational objectives, IT capabilities, and compliance requirements.

• Bachelor’s degree in Computer Science, Engineering, or a related technical field.
• Minimum of 4 years of experience in Business Continuity and Disaster Recovery.
• Strong communication skills with the ability to collaborate across all organizational levels.
• Demonstrated experience in security or risk management with a solid understanding of DR principles.
• Proven track record of effective stakeholder management and cross-functional collaboration.

• Familiarity with financial institutions and regulatory frameworks (e.g., FFIEC, FINRA, SOX).
• Experience with audit and compliance reporting related to SOC 2 or similar standards.
• Background in enterprise IT or cybersecurity operations.

• Certifications such as CBCP (Certified Business Continuity Professional), CISSP, CISA, or CRISC are a plus but not required.