Resilience & Business Continuity Risk Lead - Chief Risk Office

Bloomberg; New York (NY); On-site; USD 185,000 - 245,000; Full time

Job summary

Bloomberg is seeking a seasoned professional to join its second line of defense (2LoD) Risk function, providing independent oversight, challenge, and governance of the firm's Resilience program — encompassing Business Continuity (BC), Disaster Recovery (DR), and Operational Resilience.

The role demands deep 2LoD expertise, strong technical grounding, and the ability to drive policy, testing, and incident learnings across complex technology environments in a high-stakes financial services

Qualifications

• 10+ years of experience spanning BC/DR and enterprise resilience.
• Hands-on technical grounding in at least one associated discipline.
• Ability to translate technical findings into risk-based narratives for senior audiences.

Responsibilities

• Provide independent oversight and challenge of Bloomberg's BC, DR and resilience programs and practices.
• Assess technical adequacy of recovery posture, including architecture, failover, data replication, backups, and recovery tiering.
• Evaluate alignment between business continuity plans, DR capabilities and impact tolerances for end-to-end recoverability.

Skills

BC/DR experience

Enterprise resilience

Technical depth

Stakeholder engagement

Communication skills

Job description

Description & Requirements

Bloomberg is seeking a seasoned professional to join its second line of defense (2LoD) Risk function, providing independent oversight, challenge, and governance of the firm's Resilience program — encompassing Business Continuity(BC), Disaster Recovery (DR), and Operational Resilience.

Bloomberg is seeking a seasoned professional to join its second line of defense (2LoD) Risk function, providing independent oversight, challenge, and governance of the firm's Resilience program — encompassing Business Continuity(BC), Disaster Recovery (DR), and Operational Resilience.

Location

New York

Business Area

Legal, Compliance, and Risk

Ref #

10054130

Key Responsibilities

• Provide robust independent oversight and challenge of Bloomberg's BC, /DR and broader resilience programs and practices operated by the first line of defense. This will include, for example, assessment, oversight, and challenge of the adopted frameworks and strategies for BC, DR, and OpRes.
• Assess the technical adequacy of the firm's recovery posture — including disaster recovery architecture, failover mechanisms, data replication strategies, backup integrity, and system recovery tiering — not just the documentation surrounding them.
• Evaluate alignment between business continuity plans, disaster recovery capabilities, and impact tolerance thresholds to ensure end-to-end recoverability of critical services under realistic failure scenarios.
• Identify gaps, weaknesses, and emerging risks across the resilience framework and elevate findings with clear, evidence-based remediation recommendations.
• Own and maintain the 2LoD resilience policy and standards suite, ensuring they reflect both industry best practice and Bloomberg's complex, technology-intensive operating environment.
• Drive periodic reviews and updates to frameworks in response to technology change, infrastructure evolution, and lessons learned from incidents and exercises.
• Oversee the 2LoD review of resilience testing programs, including business continuity exercises, disaster recovery failover tests, tabletop simulations, and scenario-based resilience stress tests.
• Ensure testing scenarios are technically realistic, covering cyber incidents (including ransomware and destructive attacks), infrastructure failures, data corruption events, third-party outages, and geographic disruptions.
• Verify that lessons learned from tests and live incidents result in tangible improvements to resilience capabilities.
• Evaluate third-party and vendor disaster recovery capabilities where they underpin critical Bloomberg services, with particular attention to concentration risk and recovery interdependencies.
• Report on the firm's recovery posture against defined impact tolerances, flagging where resilience capability gaps could prevent the firm from remaining within tolerance during a severe but plausible disruption.
• Contribute to operational risk appetite frameworks as they relate to resilience and recoverability risks.
• Build trusted relationships with the 1LoD resilience teams, Technology Infrastructure, Site Reliability Engineering, Cyber/Information Security, Third Party Risk, and business leadership.
• Serve as a technically credible challenge partner to Engineering and Product teams on resilience architecture decisions — able to engage substantively on design trade-offs, not just governance process.
• Promote a culture where resilience is understood as an interconnected, technically grounded discipline rather than a siloed compliance activity.

Required Qualifications

• 10+ years of experience spanning BC/DR and enterprise resilience, with deep hands‑on technical grounding in at least one associated disciplines.
• Strong command of disaster recovery concepts including RTO/RPO design and validation, recovery tiering, active/passive and active/active failover architectures, data replication technologies, backup and restoration methodologies, and dependency mapping.
• Experience assessing or governing disaster recovery capabilities in complex, technology-intensive environments — including on‑premise data centers, hybrid infrastructure, and cloud‑native or multi‑cloud architectures.
• Proven 2LoD experience with demonstrated ability to provide credible independent oversight and challenge, including the technical depth to go beyond policy review and assess actual capability.
• Experience engaging constructively with engineering, SRE, and infrastructure teams
• Strong analytical and communication skills; able to translate highly technical findings into risk‑based narratives for senior and Board‑level audiences.

Preferred Qualifications

• Professional certifications such as CBCP, MBCI, CRISC, AWS/Azure/GCP certifications, or equivalent technical credentials in infrastructure, cloud, or IT risk.
• Experience assessing cyber-informed disaster recovery strategies, including ransomware recovery planning, immutable backup architectures, and clean‑room recovery environments.
• Exposure to financial market infrastructure, data platforms, or real‑time systems where recovery time requirements are exceptionally tight and data integrity is paramount.
• Experience evaluating third‑party and vendor disaster recovery capabilities, including due diligence on critical technology suppliers.

Salary Range = 185,000 - 245,000 USD Annual + Benefits + Bonus

The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.

We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.