What's the Opportunity?
The Senior Manager, Business Continuity Management & Testing is a strategic leader driving operational resilience across Technology & Operations Canada. You will lead the design, execution, and validation of comprehensive Business Continuity testing programs including tabletop exercises, scenario-based simulations, and live drills. You will manage a portfolio of Business Impact Analyses (BIAs) and Business Continuity Plans (BCPs) to ensure organizational alignment with Enterprise Business Continuity Risk Management (BCRM) standards and regulatory requirements (OSFI E-21). This role integrates testing expertise with incident management to proactively identify vulnerabilities, execute swift recovery strategies, validate organizational preparedness, and deliver actionable insights to senior leadership - making a lasting impact through effective BCM incident response, continuous improvement, and operational resilience.
Job Description
What will you do?
Business Continuity Portfolio Management & Analysis
- Lead Business Impact Analysis (BIA) activities; assess critical business functions, dependencies, and define Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) aligned with enterprise risk tolerance
- Develop, review, and maintain a strategic portfolio of BCP artifacts to ensure currency, relevance, and compliance with OSFI E-21 and BCRM standards
- Conduct comprehensive threat and risk assessments; evaluate potential threats (cyberattacks, natural disasters, operational failures) and recommend appropriate risk mitigation strategies
- Maintain accountability for assigned BCP artifacts and ensure regular updates reflecting organizational, technological, and business changes
BCP Testing, Scenario Planning & Validation
- Design and lead comprehensive BCP testing programs including tabletop exercises, scenario-based simulations, live drills, and focused recovery exercises tailored to organizational learning objectives
- Develop detailed test plans, testing protocols, and scenario frameworks that validate BCP effectiveness and organizational readiness
- Facilitate scenario development workshops with business and technology stakeholders to ensure realistic, relevant testing exercises
- Coordinate testing logistics, participant communications, and exercise execution; ensure all participants understand roles, responsibilities, and exercise objectives
- Analyze testing results, capture lessons learned, and develop actionable recommendations to strengthen BCPs and organizational capabilities
- Track and report on testing metrics, including exercise frequency, participant feedback, identified gaps, and remediation status
Incident Management & Crisis Response
- Lead the Incident Management Team (IMT) for incidents of local, regional, or geographic significance; assess severity, determine escalation protocols, and coordinate response efforts across cross-functional teams
- Apply BCP testing insights and validated recovery strategies to lead real incident response and recovery efforts; manage communications, coordinate recovery actions, and track incident resolution
- Declare incident status, prioritize recovery and resolution efforts based on business impact, manage escalation procedures, and declare "Business as Usual" upon resolution
- Lead incident communications to internal and external stakeholders; coordinate with senior leadership and regulatory bodies during crisis situations
Continuous Improvement & Governance
- Complete comprehensive Post-Incident Review (PIR) documentation including root cause analysis, facilitate stakeholder review, and document lessons learned for integration into BCPs and testing programs
- Maintain comprehensive incident management and testing documentation including playbooks, team memberships, incident guides, testing plans, and exercise reports aligned with EBCRM standards and regulatory requirements
- Proactively identify and drive continuous improvement opportunities across incident management and BCP testing processes; identify efficiency improvements