Business Continuity & Disaster Recovery Specialist

Let us tell you what we are looking for. For us, the most important thing is to discover your skills!

Here's what we're looking for. The most important thing for us is to get to know and discover your skills!

• Experience in Business Continuity Management, Disaster Recovery, Operational Resilience, and IT Risk is desirable.
• Experience in internal models is highly valued but not essential.
• Knowledge of Business Continuity and Disaster Recovery, knowledge of IT environments, and the ability to understand dependencies between applications, infrastructure, and technological services will be taken into account.
• Ability to interact with technical areas and translate their implications into a continuity and resilience context.
• We will positively value a university degree in Engineering or equivalent technical training.
• English level (spoken and written) will be positively considered

• Knowledge of IT Risk Management and Cybersecurity Risk.
• Solid knowledge of DORA (Digital Operational Resilience Act).
• Knowledge of other standards, methodologies, and reference frameworks related to GRC, resilience, continuity, and cybersecurity.
• Knowledge of IT infrastructures, cloud, architectures, networks, and recovery environments.

Certifications related to GRC, IT Risk, Cybersecurity, Business Continuity, or Operational Resilience will be valued, such as:

• CISA - Certified Information Systems Auditor.
• CRISC - Certified in Risk and Information Systems Control.
• Certifications related to ISO/IEC 22301 / Business Continuity / Disaster recovery
• Other equivalent certifications.

And if you are left wanting to know more and you wonder: what will my day-to-day be like in this project?

Provide support in the management, maintenance, and evolution of the organization's Business Continuity and disaster recovery framework.

The position will participate transversally throughout the entire continuity and recovery cycle, including BIA/RIA, Business Continuity Plans, Disaster Recovery Plans, recovery testing, crisis simulations, reporting, audits, and crisis management, working closely with business areas and technology teams.

Business Continuity Management:

• Provide support to the BCO in the definition, implementation, maintenance, and improvement of business continuity plans.
• Collaborate in Business Impact Analysis (BIA) processes and continuity risk assessments, working jointly with the involved business areas.
• Participate in the identification and monitoring of critical processes, services, and resources, as well as their recovery needs.
• Collaborate in the definition and implementation of continuity strategies and resilience measures.
• Coordinate with the different technical and business teams the activities necessary to keep continuity plans and capabilities up to date.
• Participate in the maintenance and evolution of Crisis Management procedures.
• Provide support in the preparation, coordination, and execution of crisis simulations and tabletop exercises.
• Collaborate in the design of scenarios, coordination of participants, and preparation of documentation for the exercises.
• Document results, lessons learned, and opportunities for improvement, monitoring the resulting actions.
• Provide support to the BCO during the real activation of a crisis situation, collaborating in operational coordination, monitoring of actions, and maintenance of the information necessary for managing the situation.

Disaster Recovery:

• Provide support to the DRO in the coordination, definition, and maintenance of IT recovery plans (DRP) associated with critical applications and services.
• Coordinate and monitor the planning and execution of Disaster Recovery tests (DRT) with the Infrastructure, Applications, Cybersecurity, and other involved teams.
• Participate in recovery and failover exercises, monitoring results, deviations, and improvement actions.
• Monitor findings and remediation plans derived from recovery tests and exercises.
• Contribute to ensuring that recovery plans are up to date, documented, tested, and aligned with the defined recovery objectives.
• Maintain fluid communication with technical teams, understanding the dependencies of infrastructure, applications, communications, cloud, cybersecurity, and other technological components associated with recovery, without assuming the technical execution of said activities.