Program Manager -Enterprise Resilience

Sentara Health; United States; On-site; USD 121,000 - 183,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

401k/403B with employer match

Paid Time Off

Job summary

Sentara Health seeks an Enterprise Resilience professional to strengthen the organization’s ability to anticipate, withstand, respond to, recover from, and adapt to cyber, technology, and third-party disruptions. You will link technical recoverability with business continuity and critical outcomes, working across Cyber Security, IT, Disaster Recovery, and Vendor Management.

This hands-on role requires translating resilience risks into clear actions, developing governance, standards, and

Qualifications

• 3+ years IT program management
• 5+ years enterprise resilience experience
• Experience planning or supporting disaster recovery tests and tabletop exercises
• Experience documenting risks, control gaps, and evidence in auditable form

Responsibilities

• Support development and continual improvement of the Enterprise Resilience Program, including governance and reporting.
• Identify Critical Business Services and map people, processes, tech, data, facilities, and third parties.
• Define impact tolerances, RTOs, RPOs, and recovery priorities with business owners.
• Plan and document resilience assessments, tabletop exercises, and recovery tests.
• Track findings, risks, owners, due dates, and actions through closure.

Skills

Enterprise resilience

Cyber resilience

Disaster recovery

Business continuity

Risk management

Project coordination

Stakeholder communication

Auditable documentation

Education

Bachelor's degree

CISSP

CISM

CBCP

CRISC

Azure certifications

Tools

Rubrik

Azure native backups

SQL native backups

Veeam

Job description

City/State Virginia Beach, FL Work Shift First (Days)

Overview

The Enterprise Resilience Role helps strengthen the organization’s ability to anticipate, withstand, respond to, recover from, and adapt to cyber, technology, operational, and third-party disruptions. The role connects technical recoverability with business continuity and critical business service outcomes. It partners across Cyber Security, Information Technology, Disaster Recovery, Business Continuity, Emergency Management, business operations, and vendor management to establish consistent resilience requirements, validate recovery capabilities, track gaps, and drive measurable improvements. This is a hands-on role for someone who can work across technical and business teams, bring structure to a developing enterprise program, and translate resilience risks into clear actions and decisions.

Key Responsibilities

Support the development, implementation, and continuous improvement of the Enterprise Resilience Program, including governance, standards, procedures, playbooks, reporting, and program documentation. Help identify and maintain Critical Business Services and map the people, processes, technology, data, facilities, and third parties required to deliver them. Partner with business and technology owners to define and validate impact tolerances, recovery time objectives, recovery point objectives, minimum service levels, and recovery priorities. Plan, coordinate, and document resilience assessments, business impact analyses, tabletop exercises, disaster recovery tests, cyber recovery exercises, and simulations. Track findings, risks, decisions, owners, due dates, and corrective actions through closure; identify recurring themes and elevate material gaps when needed. Enhance backup and recovery capabilities, including Rubrik, Azure-native backups, SQL-native backups, and Veeam. Improve ransomware-resilient recovery capabilities through immutable backups, clean-point validation, data-integrity checks, malware-aware recovery practices, and secure restoration workflows. Help build and mature the isolated recovery environment, including automation of restoration testing and repeatable validation of recoverability. Participate in disaster recovery exercises with infrastructure, application, security, and business teams to confirm that systems, data, integrations, and business processes can be restored and validated. Coordinate cyber, business, and enterprise tabletop exercises to test decision-making, communications, downtime procedures, manual workarounds, escalation paths, and recovery actions. Support containment, response, and recovery activities during disruptive events, including coordination across technical and business teams and documentation of key decisions. Conduct after-action reviews and convert lessons learned into prioritized, assigned, and measurable improvements. Assess third-party resilience capabilities supporting critical services, including continuity plans, recovery commitments, testing evidence, dependencies, concentration risks, and contingency options. Develop dashboards, metrics, and executive-ready reporting for recovery readiness, testing coverage, unresolved risk, remediation progress, and resilience maturity. Create clear technical and business documentation, standards, procedures, and repeatable processes that reduce manual effort and improve consistency. Promote resilience awareness by helping stakeholders understand their roles before, during, and after a disruption.

Education

Bachelor's (Preferred) Education. Certification/Licensure. Relevant certifications such as CISSP, CISM, CBCP, CRISC, or Microsoft Azure certifications. (Preferred)

Experience

With a degree: Minimum of 3 years of relevant experience in IT program/project management. Five or more years of experience in enterprise resilience, cyber resilience, disaster recovery, business continuity, infrastructure, information security, risk management, or a related discipline. Working knowledge of ransomware-resilient recovery, immutable storage, clean recovery, isolated recovery environments, and restoration validation. Experience planning or supporting disaster recovery tests, tabletop exercises, incident response activities, or business continuity exercises. Ability to analyze complex service dependencies and connect technical recovery capabilities to business and operational outcomes. Experience documenting risks, control gaps, corrective actions, procedures, and evidence in a structured and auditable manner. Strong project coordination and follow-through, including the ability to manage multiple workstreams, owners, dependencies, and deadlines. Clear written and verbal communication skills, with the ability to explain technical risk and recovery issues to both technical and business audiences. Ability to remain organized and effective during high-pressure incidents and work constructively across teams where processes or ownership are still maturing.

Preferred Qualifications

Experience in healthcare, another highly regulated industry, or a complex organization with critical 24/7 operations. Knowledge of business impact analysis, critical business services, impact tolerances, crisis management, third-party resilience, and operational resilience practices. Familiarity with cloud resilience patterns, particularly Microsoft Azure, including identity, data, application, infrastructure, and regional recovery considerations. Experience creating resilience metrics, reporting, dashboards, maturity assessments, or executive presentations. Relevant certifications such as CISSP, CISM, CBCP, CRISC, or Microsoft Azure certifications. Enterprise resilience assessments that include technology, business operations, workforce, facilities, data, and critical third parties.

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $120,744.00 - $183,164.80 annually. Additional compensation may be available for this role, such as shift differentials, on-call pay, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually. Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits.

Benefits

• Caring For Your Family and Your Career
• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission “to improve health every day,” this is a tobacco-free environment.

For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

Sentara Health is a Virginia and Northeastern North Carolina based not-for-profit integrated healthcare provider that has been in business for over 131 years. Offering hundreds of sites of care including 12 hospitals, PACE, home health, hospice, medical groups, imaging services, therapy, outpatient surgery centers, and an 858,000 member health plan.

The people of the communities that we serve have nominated Sentara “Employer of Choice” for over ten years. U.S. News and World Report has recognized Sentara as having the Best Hospitals for 15+ years. Sentara offers professional development and a continued employment philosophy!