Program Manager -Enterprise Resilience

sentara; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Sentara is seeking an Enterprise Resilience professional to strengthen the organization's ability to anticipate, withstand, respond to, recover from, and adapt to cyber, technology, operational, and third-party disruptions.

The role connects technical recoverability with business continuity and critical business service outcomes, partnering across Cyber Security, IT, Disaster Recovery, and Business Operations.

Qualifications

• Minimum of 3 years in IT program/project management.
• 5+ years in enterprise resilience, cyber resilience, or related fields.
• Experience planning disaster recovery tests and tabletop exercises.
• Ability to map dependencies and connect recovery to business outcomes.
• Strong written and verbal communication for technical and business audiences.

Responsibilities

• Support development and improvement of the Enterprise Resilience Program.
• Identify Critical Business Services and map required resources.
• Define recovery objectives, minimum service levels, and priorities.
• Plan resilience assessments, DR tests, and simulations.
• Track findings, risks, owners, and corrective actions through closure.
• Enhance backup/recovery capabilities and secure recovery workflows.
• Coordinate cross-team tabletop exercises and incident response activities.
• Create dashboards and executive-ready reporting on readiness.

Skills

Project coordination

Risk communication

Business continuity

Incident response

Recovery planning

Education

Bachelor's degree (Preferred)

Tools

Rubrik

Azure backups

SQL backups

Veeam

Job description

City/StateVirginia Beach, FLWork ShiftFirst (Days)

Overview:OverviewThe Enterprise Resilience Role helps strengthen the organization's ability to anticipate, withstand, respond to, recover from, and adapt to cyber, technology, operational, and third-party disruptions. The role connects technical recoverability with business continuity and critical business service outcomes. It partners across Cyber Security, Information Technology, Disaster Recovery, Business Continuity, Emergency Management, business operations, and vendor management to establish consistent resilience requirements, validate recovery capabilities, track gaps, and drive measurable improvements.This is a hands‑on role for someone who can work across technical and business teams, bring structure to a developing enterprise program, and translate resilience risks into clear actions and decisions.

Key Responsibilities

• Support the development, implementation, and continuous improvement of the Enterprise Resilience Program, including governance, standards, procedures, playbooks, reporting, and program documentation.
• Help identify and maintain Critical Business Services and map the people, processes, technology, data, facilities, and third parties required to deliver them.
• Partner with business and technology owners to define and validate impact tolerances, recovery time objectives, recovery point objectives, minimum service levels, and recovery priorities.
• Plan, coordinate, and document resilience assessments, business impact analyses, tabletop exercises, disaster recovery tests, cyber recovery exercises, and simulations.
• Track findings, risks, decisions, owners, due dates, and corrective actions through closure; identify recurring themes and elevate material gaps when needed.
• Enhance backup and recovery capabilities, including Rubrik, Azure‑native backups, SQL‑native backups, and Veeam.
• Improve ransomware‑resilient recovery capabilities through immutable backups, clean‑point validation, data‑integrity checks, malware‑aware recovery practices and secure recovery workflows.
• Help build and mature the isolated recovery environment, including automation of restoration testing and repeatable validation of recoverability.
• Participate in disaster recovery exercises with infrastructure, application, security, and business teams to confirm that systems, data, integrations, and business processes can be restored and validated.
• Coordinate cyber, business, and enterprise tabletop exercises to test decision‑making, communications, downtime procedures, manual workarounds, escalation paths, and recovery actions.
• Support containment, response, and recovery activities during disruptive events, including coordination across technical and business teams and documentation of key decisions.
• Conduct after‑action reviews and convert lessons learned into prioritized, assigned and measurable improvements.
• Assess third‑party resilience capabilities supporting critical services, including continuity plans, recovery commitments, testing evidence, dependencies, concentration risks, and contingency options.
• Develop dashboards, metrics, and executive‑ready reporting for recovery readiness, testing coverage, unresolved risk, remediation progress and resilience maturity.
• Create clear technical and business documentation, standards, procedures, and repeatable processes that reduce manual effort and improve consistency.
• Promote resilience awareness by helping stakeholders understand their roles before, during and after a disruption.

Education

Bachelor's (Preferred)

Certification/Licensure

Relevant certifications such as CISSP, CISM, CBCP, CRISC, or Microsoft Azure certifications. (Preferred)

Experience

• With a degree: Minimum of 3 years of relevant experience in IT program/project management.
• Five or more years of experience in enterprise resilience, cyber resilience, business continuity, infrastructure, information security, risk management, or a related discipline.
• Working knowledge of ransomware‑resilient recovery, immutable storage, clean recovery, isolated recovery environments, and restoration validation.
• Experience planning or supporting disaster recovery tests, tabletop exercises, incident response activities, or business continuity exercises.
• Ability to analyze complex service dependencies and connect technical recovery capabilities to business and operational outcomes.
• Experience documenting risks, control gaps, corrective actions, procedures, and evidence in a structured and auditable manner.
• Strong project coordination and follow‑through, including the ability to manage multiple workstreams, owners, dependencies, and deadlines.
• Clear written and verbal communication skills, with the ability to explain technical risk and recovery issues to both technical and business audiences.
• Ability to remain organized and effective during high‑pressure incidents and work constructively across teams where processes or ownership are still maturing.
• Pr