This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more.

Role Description

As a Cyber Risk Analyst – BCP/IT DR Specialist, you’ll be part of our Corporate Cyber Security team working as a remote employee. The Cyber Risk Analyst – BCP/IT DR Specialist is responsible for supporting and enhancing the organization’s Business Continuity Planning (BCP) and IT Disaster Recovery (DR) programs. This role will:

• Assess cyber risks
• Develop and maintain BCP/DR strategies
• Coordinate testing and exercises
• Ensure compliance with regulatory requirements
• Collaborate with cross-functional teams to identify potential threats
• Evaluate the effectiveness of existing controls
• Recommend improvements to minimize business disruption and data loss in the event of a cyber incident or disaster

Qualifications

• Strong understanding of BCP/IT DR program management and risk governance
• Knowledge of risk management frameworks and standards (ISO 27001, NIST)
• Experience with BT and OT environments
• Minimum 5 years in IT risk management, cybersecurity, or BCP/IT DR
• Demonstrated experience managing IT DR programs in complex organizations

Requirements

• Investigate and understand the BCP/IT DR capabilities across the organization
• Document BCP/IT DR risks and issues according to the defined risk management framework
• Partner with leadership to determine risk appetite in accordance with BCP/IT DR risks
• Develop, maintain, and enhance the governance process for BCP/IT DR standards, processes, and documentation
• Partner with business owners to implement and manage BCP/IT DR programs, including testing and continuous improvement
• Conduct gap analyses and recommend enhancements for BCP/IT DR controls
• Create and monitor program metrics for operational performance for leadership consumption
• Create and monitor Key Risk Indicators (KRIs) to track risk exposure
• Support and oversee the execution of risk assessments
• Collaborate with embedded risk managers and the Cyber Security Organization to align initiatives and address risks
• Analyze and execute policy exceptions, ensuring appropriate risk acceptance and mitigation
• Maintain risk governance documentation, dashboards, and reports
• Stay informed on emerging risks, regulatory changes, and best practices

Benefits

• Medical, dental, life, vision, disability, 401(k), Employee Stock Purchase Plan, paid time off, and tuition reimbursement
• Discounts on Stanley Black & Decker tools and other partner programs