Business Continuity Plan Manager

Eetdbuyersguide; Salt Lake City (UT); On-site; USD 110,000 - 145,000; Full time

Job summary

PacifiCorp is seeking a senior BCM and security planning expert to lead corporate-wide business continuity efforts, coordinating with IT, Security, and Facilities. You will design, document, and exercise recovery plans, and ensure regulatory compliance across SOX, ISMS, CIP standards.

The role requires seven years in business continuity, emergency management, and security planning, with strong communication and project management skills.

Qualifications

• Seven years of professional experience in business, technology recovery, emergency management, and security planning.
• Experience in developing and conducting complex business response and recovery exercises.
• Knowledge of information and operational technology terms, equipment, systems, functions, and major vendors.
• Excellent oral and written communication skills, including presentation skills.
• Effective interpersonal skills and customer relationship skills.
• Effective analytical, problem-solving, and decision-making skills.
• Project management skills: ability to prioritize and handle multiple tasks and projects concurrently.

Responsibilities

• Lead BCM program across units, assess disruption impacts, define critical functions, and document recovery plans.
• Coordinate with IT and Security to align tech plans with business continuity.
• Create and maintain recovery plans, security policies, training, and processes.
• Ensure recovery and incident response plans are documented and tested per regulations (SOX, ISMS, CIP-008/009/012).
• Provide SME on regulatory requirements.
• Administer planning tool and liaison for business units; approve Bold Planning usage.
• Train business contacts on recovery planning tools.
• Develop and facilitate incident response and recovery exercises.
• Lead planner in Emergency Management for GridEx and coordinate with agencies.
• Assist in security awareness materials development.
• Liaise with Facilities to maintain recovery facilities.
• Manage relationships for recovery, emergency response, and security services.
• Participate in company strategies and technologies.
• Assist in implementation of planning software and access control systems.
• Ensure projects are completed within time and budget.
• Coordinate with emergency management reps and participate in planning activities.
• Submit documentation to audit for ISMS and EOP-008.
• Document exercise plans, agendas, and after-action reports.
• Work with application owners to ensure Restoration Exercises are conducted.
• Create Team Verification process to ensure plans remain compliant.
• Participate in weekly BHE Incident Response, Emergency Resiliency, and BOLD Planning tool meetings.
• Participate in monthly IT- ICS planning and meeting.

Skills

BCP/DR experience

BCP/DR exercises

IT/OT knowledge

Communication

Interpersonal skills

Analytical thinking

Project management

Education

Bachelor's degree in CS/IT or related field

Job description

General Purpose

Support a corporate wide security assurance program that addresses business continuity management, incident management, security awareness, security policies and compliance with regulatory and information system requirements. Implement business objectives, strategies, and plans.

Responsibilities

• As a senior subject matter expert and lead specialist related to all aspects of business continuity practices, work with multiple business units regarding assessment of potential business impact of a disruption; identification and definition of critical, time-sensitive functions; and design, development, and documentation of business unit business recovery plans.
• Work with IT and Security to ensure that technology and cyber security plans align with business continuity plans.
• Create, implement, and maintain business recovery plans, security policies, standards, training programs, and processes, in the corporate recovery planning tool.
• Ensure all applicable business recovery plans and cyber-security incident response plans are documented and exercised according to applicable regulations (e.g., SOX, ISMS and CIP-008, 009, 012).
• Provide subject matter expertise on related regulatory requirements.
• Serve as the administrator of the corporate planning tool and as a liaison for PacifiCorp business units. Primary approver and account holder for the Bold Planning application.
• Train business contacts on use of the business recovery and technology recovery planning tool.
• Develop and facilitate business and technology incident response and recovery exercises.
• Serve as lead planner within the Emergency Management team for PacifiCorp for GridEx (coordinate BCPs, TRPs, and outside agencies).
• Assist in the development and implementation of security awareness materials including but not limited to presentations, phishing campaigns, bulletins and newsletter articles in coordination with the Corporate IT Disaster Recovery planner.
• Liaison with the Corporate Facilities team to assist in maintaining business recovery facilities to ensure that internal recovery sites are updated and functioning properly.
• Manage relationships for business recovery, emergency response and other security-related services.
• Participate in the development of company strategies and mission critical technologies.
• Assist in the implementation and release of new and existing business recovery assessments, planning software, and physical access control systems.
• Ensure projects are completed within committed time and budget.
• Coordinate with internal and external emergency management representatives and participate in federal, state, county, and city agency planning activities and exercises.
• Submit documentation to audit and compliance for ISMS and EOP -008 requirements (Distribute Change Control and final plan to Lead to share with Team Members or include Team Members in email)
• Document exercise plans, agenda and after-action reports for exercises and incidents (evidence includes invitations, agenda, exercise plan (or scenario presentation), post-exercise review)
• Work with application owners to ensure all Restoration Exercises are conducted and proper documentation is included and available upon request for auditors/regulators..
• Create Team Verification process to ensure plans remain compliant.
• Participate in weekly BHE Incident Response Management, Emergency Resiliency, and BOLD Planning tool meetings.
• Participate in monthly IT - ICS planning and meeting.

Requirements

• Bachelor's degree in computer science, Information Technology, or related field; or equivalent work experience. (Typically, four years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor's degree. A minimum of three years additional directly related technical experience is required.)
• Seven years of professional experience in business, technology recovery, emergency management, and security planning.
• Experience in developing and conducting complex business response and recovery exercises.
• Knowledge of information and operational technology terms, equipment, systems, functions, and major vendors.
• Excellent oral and written communication skills, including presentation skills.
• Effective interpersonal skills and customer relationship skills.
• Effective analytical, problem-solving, and decision-making skills.
• Project management skills: ability to prioritize and handle multiple tasks and projects concurrently.

Preferences

• Relevant Professional certifications in BCP DR, and EM (e.g., Certified Business Continuity Professional [CBCP] / master's Business Continuity Professional [MBCP], Certified Emergency Manager (CEM) preferred.