Manager Tech Risk Recovery Planning & Resilience

EXL; Dadri, Gurugram District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

EXL seeks a senior consultant to lead end-to-end operational resilience initiatives, including tech risk and BCP/DR framework design tailored to client models. You will partner with business and IT teams to define RTOs/RPOs, map dependencies, and drive recovery strategies under stressed conditions.

The role covers governance, testing, and thought leadership to elevate the firm’s resilience practice, with a focus on ISO frameworks and regulatory regimes across global clients.

Qualifications

• 7+ years of professional experience in a services firm, management consultancy, or GCC advisory wing.
• Recovery planning experience including defining RTOs and RPOs under stressed conditions.
• Deep expertise in international standards and frameworks (ISO 22301, ISO 27001, NIST SP 800-34, COBIT, ITIL).

Responsibilities

• Lead end-to-end implementation of Operational Resilience, Tech Risk, and BCP/DR frameworks tailored to client needs.
• Design and operationalize recovery strategies, including procedures and data workflows.
• Evaluate IT landscapes for vulnerabilities across cloud, legacy apps, data infra, and third-party vendors.
• Guide BIAs to map critical services to technical dependencies and recovery steps.
• Coordinate resilience testing, including live failovers and crisis tabletop exercises.

Skills

Recovery planning

RTO/RPO design

Cloud risk

IT governance

Regulatory frameworks

ISO 22301

ISO 27001

NIST SP 800-34

COBIT

ITIL

Job description

Role & responsibilities

• Framework Design & Implementation: Lead the delivery of end-to-end Operational Resilience, Tech Risk, and BCP/DR frameworks tailored to client business models and regulatory environments.
• End-to-End Recovery Planning: Partner with client business units and IT engineering teams to design, document, and operationalize robust recovery strategies. This includes defining service restoration procedures, data replication/synchronization workflows, and alternative operating models during severe disruptions.
• Technology Risk Assessments: Evaluate client IT landscapes, identifying vulnerabilities across cloud environments, legacy applications, data infrastructure, and third-party vendors (TPRM) that could jeopardize recovery timelines.
• Dependency & Impact Mapping: Guide clients through complex Business Impact Assessments (BIAs) to define critical business services, mapping them against technical dependencies (infrastructure, applications, data, and vendors).
• Testing & Recovery Validation: Design, coordinate, and facilitate comprehensive resilience testing strategies. This includes live IT component failovers, data-loss/ransomware recovery simulations, and executive-level crisis management tabletop exercises.

Business Development & Practice Growth

• Proposal & RFP Support: Contribute to or lead the creation of client proposals, pitch presentations, and Statements of Work (SOWs) targeting resilience and recovery transformations.
• Thought Leadership: Assist in developing methodology toolkits, recovery planning accelerators, and point-of-view whitepapers to elevate the firm's brand in the market.
• Up-selling: Identify adjacent client needs(e.g., cyber resilience, IT governance, cloud migration risks) during ongoing engagements to expand the account footprint.

Team Leadership & Project Management

• Engagement Delivery: Manage project timelines, resource allocation, billing/profitability metrics, and deliverable quality for multiple concurrent client workstreams.
• People Management: Mentor, coach, and upskill junior consultants, fostering a collaborative, continuous-learning environment.

Candidate Profile & Technical Qualifications

• Experience: 7+ years of professional experience, with a significant portion spent within a professional services firm, management consultancy, or a highly sophisticated Global Capability Center (GCC) advisory wing.
• Recovery Acumen: Proven experience in determining realistic Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs), and architecting the recovery steps required to meet them under stressed conditions.
• Core Methodologies: Deep expertise in industry standards and frameworks, including ISO 22301, ISO 27001, NIST SP 800-34, COBIT, and ITIL.
• Modern Tech Familiarity: Solid understanding of technology risk patterns and recovery mechanisms associated with cloud architectures (AWS, Azure, GCP), hybrid infrastructure, and digital supply chains.
• Regulatory Landscape: Awareness of global resilience regulations. Direct experience with or knowledge of the UKs FCA/PRA Operational Resilience rules, Europe's DORA (Digital Operational Resilience Act) is highly advantageous.
• Certifications (Highly Valued): CRISC, CISA, CBCP/AMBCI, or specialized Cloud Risk/Security/DR certifications.