Disaster Recovery and Resilience Engineer

Brown & Brown; Daytona Beach (FL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health Benefits

401k

ESPP

Student Loan Assistance

Tuition Reimbursement

Paid Time Off

Job summary

Brown & Brown seeks a Disaster Recovery and Resilience Engineer to own the enterprise DR program end to end in Daytona Beach, FL or Plano, TX. You will oversee application intake, BIA, recovery plan currency, test scheduling, annual recertification, and executive reporting, ensuring coverage and currency across the organization.

You will serve as a governance lead during incidents and coordinate with senior stakeholders to drive closure.

Qualifications

• 6+ years in IT program management or governance.
• Experience operating a disaster recovery program at enterprise scale.
• Working knowledge of Business Impact Analysis, RTO/RPO tiering, and recovery plan structure.
• Track record producing audit-ready evidence and interfacing with auditors/regulators.
• Experience building and operating governance workflow in ServiceNow.
• Executive reporting experience to senior leadership.

Responsibilities

• Own the seven-phase recovery program lifecycle end to end: Discovery through Maintenance for all estate applications.
• Serve as primary point of contact for Application Owners and IT leadership on recovery obligations; drive owner accountability.
• Coordinate enterprise recovery test calendar across apps, regions, and divisions; manage test logistics and findings.
• Maintain audit-ready evidence set for recovery capability; interface with internal/external audits and regulatory requests.
• Publish recurring recovery posture reporting; maintain program documentation (policy, standards, procedures, RACI, ICS).

Skills

IT program mgmt

IT governance

Business continuity

Technology risk

Disaster recovery

ServiceNow

Executive reporting

Stakeholder mgmt

Tools

ServiceNow

Job description

Built on meritocracy, our unique company culture rewards self‑starters and those who are committed to doing what is best for our customers. Brown & Brown is seeking a Disaster Recovery and Resilience Engineer to join our growing team in Daytona Beach, FL or Plano, TX. The DR and Resilience Analyst owns the operation and governance of Brown & Brown's enterprise disaster recovery program end to end, from application intake and Business Impact Analysis through tiering, recovery plan currency, test scheduling, annual recertification, evidence, and executive reporting. The core work is driving completion across an organization that does not report to this role. Success is measured in coverage, currency, and closure, not in activity. During a declared event, this role serves as a Scribe within the incident command structure, owning the contemporaneous decision log that supports post-incident review, regulatory notification, insurance claim, and any subsequent dispute.

How You Will Contribute:

1. Program lifecycle ownership Own the seven-phase recovery program lifecycle end to end: Discovery, Identification, Assessment, Planning, Implementation, Training & Test, and Maintenance for the full application of estate. Operate the application intake path: ensure every operational application entering the estate is registered, risk-reviewed, and assigned an owner, and that no application reaches production without a defined recovery posture or a documented, approved exception. Drive Business Impact Analysis through completion with Application and Business Owners and maintain BIA currency across the estate. Manage tier assignments against RTO/RPO criteria and manage the DCIO review and risk-acceptance path for applications where no recovery plan will be built. Ensure Application Recovery Plans exist, are complete against the ARP standard, and are currently including the required Security-Event Recovery Playbook for Tier 1-2 applications. Operate the annual recertification cadence across the estate and drive it to on-time completion.

2. Divisional and stakeholder engagement Serve as the primary point of contact for Application Owners, Business Owners, and divisional IT leadership on all recovery program obligations. Build and sustain working relationships across divisions that are not organizationally obligated to participate and convert program requirements into commitments with named owners and dates. Integrate newly acquired entities into the recovery program as part of the standard integration path, working with acquisition integration teams to establish recovery posture rather than inheriting an exception. Deliver program education so that owners understand their obligations, what a BIA asks of them, and what a recovery test will require from their team. Escalate non-participation. Where an owner or division does not engage after defined outreach, report it through Service Management governance to the DCIO as a control failure with a named accountable individual. Non-participation is not absorbed as a scheduling problem.

3. Test program orchestration Build and own the enterprise recovery test calendar across applications, regions, and divisions, sequenced around business cycles, change freezes, and platform events including the ServiceNow consolidation. Coordinate all logistics for recovery tests: participants, scheduling, scope, entry and exit criteria, communications, and business-side representation. Coordinate annual destructive-cyber tabletop exercises with Security Operations, Legal, Corporate Communications, and Crisis Management — including scenario development, facilitation logistics, and findings capture. Capture, publish, and track test outcomes against declared RTO and RPO. A test that does not meet its declared targets is recorded as failed, and re-test is scheduled. Maintain the findings register and drive every finding to closure against a committed date with the owner.

4. Evidence, audit, and regulatory readiness Maintain the authoritative, audit-ready evidence set for enterprise recovery capability: plan currency, test execution, results against target, findings, and remediation. Serve as the primary interface for internal audit, external audit, and client due-diligence requests relating to disaster recovery and IT resilience. Maintain sufficient evidence to satisfy applicable regulatory obligations, including DORA-driven requirements for in-scope EU entities and HITRUST requirements for the segregated pharmacy environment. Maintain the recovery risk register, including all documented risk acceptances with named accepting executives and review dates.

5. Reporting and governance Produce the recurring recovery posture reporting set for Service Management governance, the DCIO, and executive leadership: coverage, currency, test pass rate, RTO/RPO achievement, findings backlog age, and divisional participation. Prepare recovery content for the Steering Committee and executive briefings. Coverage and currency reporting must reflect actual state, including applications that are non-compliant, untested, or owned by non-participating divisions. Reporting that only shows progress is a failure of this role. Own the program's operating documentation: policy, standards, procedures, RACI, and the incident command structure documentation, keeping them current and available.

Skills & Experience to be Successful:

Required:

• 6+ years in IT program management, IT governance, business continuity, or technology risk, including direct ownership of an enterprise program driven to completion across business units that were not organizationally obligated to participate.
• Demonstrated experience operating a disaster recovery, business continuity, or comparable compliance program at enterprise scale hundreds of applications or equivalent breadth.
• Working knowledge of Business Impact Analysis methodology, RTO/RPO tiering, and recovery plan structure sufficient to assess whether a submitted plan is credible rather than merely complete.
• Track record producing audit-ready evidence and interfacing directly with internal audit, external audit, or regulators.
• Experience building and operating governance workflow in ServiceNow or a comparable platform — configuring process, not only consuming it.
• Executive reporting experience, including presenting unfavorable results to senior leadership.
• Demonstrated ability to elevate constructively and hold a position under pressure from senior stakeholders.

Preferred:

• Insurance, financial services, or another regulated industry; familiarity with DORA, HITRUST, SOC 2, or comparable resilience regulation.
• Experience in a decentralized or acquisitive enterprise where governance has to work across federated divisions.
• Prior participation in a real declared incident or crisis response in a coordination or scribe capacity.

Certifications: CBCP, MBCI, CISA, ITIL, PMP, or equivalent demonstrated capability.

Technical background sufficient to hold a substantive conversation with infrastructure and application engineers without an interpreter.

Teammate Benefits & Total Well-Being

• Health Benefits: Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance
• Financial Benefits: ESPP; 401k; Student Loan Assistance; Tuition Reimbursement
• Mental Health & Wellness: Free Mental Health & Enhanced Advocacy Services
• Beyond Benefits: Paid Time Off, Holidays, Preferred Partner Discounts and more.

Not reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.

Recruiting Vendor Disclosure Statement

Brown & Brown does not accept unsolicited resumes from external recruiters, recruitment vendors or employment agencies ("Recruiting Vendors"). Recruiting Vendors must have a valid written agreement and received prior written authorization from an authorized Brown & Brown representative before submitting candidates for any publicly posted role. Any unsolicited resumes submitted to Brown & Brown or its employees become the property of Brown & Brown, and no fees will be paid for such submissions. Additional information regarding this policy can be found on our careers page.

The Power To Be Yourself

As an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, The Power to Be Yourself. We think of ourselves as a team, so we have teammates - not employees. We strive to attract people who are competitive, driven, and disciplined. Built on meritocracy, our unique company culture rewards self‑starters and those who are committed to doing what is best for our customers. Founded in 1939 as a small, two-partner firm, Brown & Brown (NYSE: BRO) and our team of companies have grown into one of the world’s largest insurance brokerages while staying true to our foundation of trust, resilience, and delivering results. With a team that is as connected locally as it is globally, our high‑performing, highly collaborative team delivers innovative risk and insurance solutions.

We look for individuals who embrace our culture, thrive in a collaborative environment, are driven to grow and succeed, and are committed to always doing what is right. With a unique culture built on integrity, superior capabilities and grit, we value teamwork, trust and courage. We think of ourselves as a team, so we have teammates—not employees, and leaders—not managers. Everything we do is about the greater "WE" - never "me". While diverse in abilities and experience, we are all connected through our core values, a commitment to our local communities and a shared mission—always doing what is best for our customers. Brown & Brown and its affiliates maintain an internal recruiting team responsible for filling open roles posted to the public. In certain situations, Brown & Brown may supplement its internal capabilities by engaging external recruiting vendors and employment agencies ("Recruiting Vendors"). Recruiting Vendors are not authorized to submit resumes, share candidate data, or directly or indirectly contact Brown & Brown employees to present candidates for employment opportunities. The only exception applies to Recruiting Vendors with an active Valid Agreement (as defined below) that has been approved by Brown & Brown. In accordance with this policy, and to ensure appropriate authorization for sharing candidate personal information, Brown & Brown will not accept unsolicited resumes from any source other than Authorized Recruiting Vendors with a Valid Agreement in place who have been expressly invited to support a specific role. Any unsolicited resumes, incomplete submissions, or candidate data received through any means (including email or otherwise) will be considered the property of Brown & Brown. Brown & Brown will not pay any placement or related fees for unsolicited submissions or candidate data provided in violation of this policy.

We welcome applications from all backgrounds.