Senior Advisor, Operational Risk and Resiliency - Express Scripts Canada

About the Department:

Operational Risk Management is a component of the IT Project Management department responsible for risk identification and mitigation across enterprise operational and resiliency assets/resources, through collaborate partnership with leaders to ensure business groups, functional teams and departments meet all requirements necessary for End-to-End compliance.

Key Responsibilities include:

• Develops, leads and maintains business continuity plan tabletop and disaster recovery strategies for restoring critical business systems.
• Develop repeatable foundation for mapping of critical operations end-to-end, inclusive of the following disciplines – people, premises, data, third parties, processes (BCP, DR Plans, playbooks, process documentations, SOP, internal controls, RA, etc.,)
• Develops and maintains measurable risk management tactics and plans on how to mitigate against and prevent business disruptions.
• Leads and develops regular and periodic testing exercises, exercise content and a maintenance schedule to validate the capability of the recovery and contingency plans.
• Leads the IT recovery and contingency plan efforts and actual event management, including organizing and leading a team of professionals from across the enterprise in the event of a disaster, communicating the summary information to all internal and external IT recovery support groups, identifying the appropriate level of resources to maintain continuity of essential functions, and tracking the overall recovery process.
• Leads and facilitates the implementation of approved solutions from the outcome of RA, exercises or disruptive events and reports back on the results.
• Leads business continuity risk analysis process and educates different levels of leadership and stakeholders across the enterprise, providing progress, updates, advice, improvement recommendations and information to the Business Continuity & Disaster Recovery Program Steering Committee.
• Develops and maintains all policies, procedures, methodologies, and documentation, including the disaster recovery plan and information and technology recovery run books. Establishes and manages a central online disaster recovery repository to house and maintain all information.
• Recommends and sponsors critical IT recovery performance targets and ensures effective monitoring systems are developed and in place. Responsible for estimates, budget and planning costs associated with the implementation of the operational risk and resiliency strategy.
• Provides training and education of the disaster recovery management program and BCP/DR industry best practices; maintains awareness of industry recovery standards and potential issues.
• Provides risk management expertise through risk reviews for key business projects, digital initiatives, questions, process changes and RFP responses.
• Develops and guides technology improvements and automation in BCP, DR and simulation exercises.
• Leads and drives excellence for enterprise operational resilience standards, processes and requirements

Key qualifications include:

• Bachelor degree from a recognized post-secondary institution in technology, business, finance, or related discipline, with a focus on IT technologies and practices.

• 5 years of related experience at progressive levels of accountability with a strong background in delivering business continuity and disaster recovery services across business continuity management domains, or an equivalent combination of education and experience.
• Advanced project management or BA experience with strengths in planning, organizational, decision-making and problem-solving skills necessary to establish standards and implement complex business continuity plans.
• Expert knowledge of the principles, concepts, practices, and technologies of a Data Centre practice as applied to Disaster Recovery planning and execution.
• Proven experience in developing and implementing an IT disaster recovery plan, executing the plan in a test or ‘live’ mode, and conducting assessments of the architecture, solutions, and technical capabilities
• Knowledge of the business functions, strategies, services and products in the area of IT products and services covering data center infrastructure, application system support, architectural frameworks, and disaster recovery best practices.
• Ability to translate BIA/Business Continuity requirements and work with technology and business to ensure the appropriate recovery strategy is established.
• Knowledgeable in current IT trends and technologies, specifically in the Microsoft technology suite
• Strong capability in stakeholder management with proven ability to influence required stakeholders for high engagement.
• Exceptional interpersonal and organizational skills.
• Demonstrated verbal and written communication skills.
• Integrity, sound judgment, and decision-making ability.
• Ability to work in a complex, fast paced and rapidly changing business environment.
• Proven problem-solving experience and excellent communication skills.
• Certification or designation by industry recognized organizations such as DRII or BCI