Director, Business Continuity Management

About the role

This is a remote position responsible for managing and leading the enterprise business continuity program across the organization. The Director, Business Continuity Management will ensure the company has the necessary processes and programs to respond and recover from significant business disruptions. This role reports directly to the Senior Director of Enterprise Risk Management (ERM).

Responsibilities

• Coordinate and facilitate the design, development, maintenance, and testing of crisis response and recovery plans for critical corporate functions and operating unit processes.
• Ensure an integrated approach for Business Continuity Management (BCM) processes across the company.
• Balance team objectives, hands-on leadership of varied BC processes, and collaboration across multiple business organizations.
• Drive future state objectives in alignment with Cybersecurity, Enterprise Risk Management, Disaster Recovery, and business goals.
• Engage with peers to understand business and technology objectives, aligning them with BCM requirements.
• Build and maintain strong working relationships with colleagues, business stakeholders, and vendors.
• Align stakeholder priorities with operational planning, including Business Impact Analyses (BIAs) and Business Continuity Plans (BCPs).
• Review outcomes of Business Impact Analysis (BIA) and align the Business Continuity framework, strategy, and plans to support business needs.
• Develop strategies to respond to operational service disruptions during significant incidents or disasters.
• Review, recommend, and maintain BC strategies based on criticality of systems, stakeholder expectations, and vendor capabilities.
• Identify business continuity risks, assess potential impact and likelihood, and develop mitigation strategies.
• Champion BC plan awareness efforts with stakeholders and vendors.
• Manage the administration of the Business Continuity program, ensuring program components (BIA, BCPs, Risk Assessments, strategies) are current and effective.
• Facilitate Business Continuity Exercises and participate in Disaster Recovery Exercises.
• Prepare schedules and materials for Business Continuity training and awareness activities.
• Validate recovery capabilities of vendors and third parties.
• Administer and manage content in the ServiceNow BCM module.
• Facilitate engagement across business units and central support functions to align approaches and share best practices.
• Maintain a single view of risks to important business services and mitigation efforts.
• Collaborate with Disaster Recovery to enhance enterprise resilience governance and synchronize with Cybersecurity governance.
• Review cloud and SaaS recoverability information, integrating Disaster Recovery-owned technical recovery strategies into the broader BC planning framework.
• Stay informed on infrastructure resilience measures, such as security, storage, and network capabilities.
• Promote education and awareness of resilience responsibilities within business, technology, and support functions.

Requirements

• Bachelor’s Degree (or foreign equivalent) in Information Technology, Business, or related field. In lieu of a degree, at least 12 years of relevant experience is required.
• 12+ years of IT/Cyber experience.
• 10+ years of operational resilience and/or business continuity management experience.
• 8+ years leading a team of direct reports.
• 7+ years of experience with management of regulatory requirements and leading practices within operational resilience.
• 7+ years with enterprise resilience or business continuity programs.
• 7+ years of experience with common technology control and risk management frameworks (e.g., NIST CSF, Secure Controls Framework, ISO 27000 series, SOC 2).
• Experience with compliance regimes such as Sarbanes Oxley, GDPR, CCPA, etc.
• Broad knowledge of common standards, frameworks, and regulatory requirements.
• Ability to observe business pain-points, break through legacy systems, and recommend innovative solutions with strong ROI.
• Clear and concise verbal and written communication skills.
• Ability to lead through influence, including at executive levels.
• Must be legally authorized to work in the United States without company sponsorship.
• Must be at least eighteen (18) years of age.

Preferred Qualifications

• Master’s degree in Computer Science, Cyber Security, Information Technology, Risk Management, or related field; or equivalent experience.
• Certifications: CRISC, CISM, CISA.
• 10+ years working in the Manufacturing or Consumer Products industry.
• Experience leading large-scale projects.
• Auditing experience across Business Continuity and Disaster Recovery capabilities.

Skills

• Business Acumen and Partnering
• Business Partnering and Ideation
• Determining criticality of business services and supporting systems
• Mapping and understanding critical end-to-end business services
• Business continuity strategy and planning
• Designing application resilience and recoverability
• Managing business continuity management systems
• Managing emergency notification systems
• Aligning criticality and capabilities with third-party risk programs
• Conducting exercises, tests, and simulations to validate recoverability of end-to-end business services

Benefits

Sherwin-Williams offers a wide range of world-class benefits designed to support employees and their families, including:

• Retirement plans
• Healthcare benefits
• Total well-being programs
• Flexibility to enhance health and well-being
• Opportunities for career development and skill growth
• Inclusive team environment and commitment to communities

A general description of benefits can be found at http://www.myswbenefits.com/. Click on “Candidates” to view benefit offerings eligible upon hiring.

Pay

Compensation decisions are dependent on various factors, including skill sets, experience, training, and organizational needs. The wage range for this role is provided considering these factors.

This position is eligible for a bonus based on performance, subject to the terms of the Company’s applicable plans.