Business Continuity/Disaster Recovery Specialist

Description

Job Description:

The role as Business Continuity/Disaster Recovery Specialist will work with the leadership and functional teams to ensure that Disaster Recovery (DR) and Business Continuity (BC) capabilities will meet the Recovery Time (RTO) and Recovery Point objectives (RPO) as defined by the Business Impact Analyses.  The program is meant to handle all aspects of a DR program, from ensuring backup and off-site strategies adequately protect the company to implementation of leading edge capabilities such as data replication, cloud, and geo-redundant failover.  Business objectives are aligned to Security Strategy while effectively meeting compliance demands (regulatory and non-regulatory). Duties may include but are not limited to; managing and enforcing DR and BC policies, training and educating end-users on proper DR and BC practices, conducting impact assessments of system outages, using security frameworks (e.g., NIST, RMF, Common Criteria, etc.), and testing and evaluation to certify and restoration processes. The role may be responsible for a combination of duties to protect information and maintain business functionality for an entire system, site, or program in order to reduce impact.

The position requires the individual to be a highly knowledgeable on a number of security technologies, have a solid understanding of information security and networking and comprehensive experience interacting with customers. Will be able to engage on tasks independently, document and communicate work efforts and provide expert level technical support and system development on an enterprise scale.

The Business Continuity/Disaster Recovery Specialist will need to be a self-starter with good analytical and problem-solving skills, flexibility, good judgment and the ability to work on concurrent tasks in an effective manner.  Will be a member of a multi-disciplined team working in a high pressure, fast paced environment. May mentor junior engineers.

Primary Responsibilities

•Work with ITS Leadership and other key stakeholders to develop and implement a comprehensive Business Continuity and Disaster Recovery program for the Leidos enterprise.

•Maintain disaster recovery program strategy aligning services and portfolio components to the strategy.

•Coordinate ITS resources that will be required to maintain an operational enterprise-wide DR program and plans for the restoration of mission-critical business applications.

•Ensure that technology platforms have backup and off-site storage strategies in place to support program goals.

•Integration of disaster recovery and business continuity for efficient and effective recovery following an interruption in service caused by a prolonged system outage or declared disaster.

•Collaborate with Business Units and Service Line teams to identify and plan mitigation efforts, business continuity recovery strategies and necessary resources to execute continuity procedures. Ensure that resources, dependencies, risks and constraints are aggressively managed in a timely fashion.

•Collect and organize information about current systems to create an inventory of systems and application, with hardware, software, and network requirements, as well as inter-system dependencies clearly identified for DR purposes.

•Identify, track prioritize and drive resolution of program level issues, leveraging lessons learned from prior experience with globally distributed IT systems and services.

•Coordinate the implementation and reporting of recovery infrastructure and processes.

•Conduct DR operation review meetings with delivery and business key stakeholders.

•Ensuring that IT support applications, where appropriate, have a fully documented, and executable DR plan that contains all of the required information, reflects current conditions from an IT infrastructure recovery standpoint, and is able to support the recovery objectives of the organization.  It DR Testing Planning & Execution.

•Coordinates and manages actual scenario-driven DR exercise as well as tabletop or simulated exercises with both business and technical staff.

•Actively manage and coordinate testing schedules, objectives, exercises, and post mortem reviews.

•Manage scope, identify and track milestones and budget across program and projects to ensure completion of program/project goals.

•Develop and provide direction and guidance to teams in developing appropriately structured and detailed program/project plans.

•Demonstrates ability to speak well in front of an audience and be able to present security briefs to high ranking personnel and be able to give presentations to personnel in a clear, concise but comprehensive manner.

Basic Qualifications

•Must have 8-10 years experience in related field

•Minimum Bachelor’s degree in related field

•Must possess a relevant certification such as Security+, CEH, or CISSP

•Must be able to pass background check for secret clearance

•Experience working in a highly regulated industry.

•Ability to identify and understand organizational risks and vulnerabilities and develop resilience strategies and response, restoration, and recovery plans to lower risk.

•Knowledge to build and mature a disaster recovery program and organizational framework based on an industry accepted capability maturity model.

•Demonstrated ability to lead risk and threat assessments to identify inherent and acquired vulnerabilities that may negatively affect the company, its resources, or reputation.

•Judgement and business acumen to recommend new or modifications to existing controls, mitigations, or management processes to lower risks and increase organizational resiliency against the most likely and highest impact events.

•Experience developing a Business Impact Analysis (BIA) to quantify and qualify potential impacts of events on the company and its operations to prepare Recovery Time Objective (RTO) and Recovery Point Objective (RPO) that meet business needs and contractual obligations.

•Ability to develop and drive DR strategy as well as write, communicate, facilitate, and present to all levels of Information Technology leadership and staff.

•Ability to recommend continuity and recovery strategies and complete a cost benefit analysis to compare the cost of implementing business continuity strategies against the value of the assets at risk.

•Experience and crisis-test judgement to develop, implement, and exercise plans to provide for a coordinated, timely, and effective response to situations.

•Knowledge and communication skills to document processes and procedure to advance the recovery time of sensitive processes by, with and through the plan manger, incident responders, and senior business leaders.

•Knowledge, skill, and ability to establish and maintain an enterprise-wide awareness program and serve as a subject matter expert.

•Working knowledge of networks and mass storage technology and capabilities.

•Ability to establish and lead and exercise, testing, maintenance, and audit program to establish leadership confidence in a predictable and repeatable performance recovery activities throughout the organization.

•Working knowledge of certification and accreditation processes in situations where IT DR plans have to be independently assessed and certified again enterprise-wide criteria and, in some cases, legal/regulatory obligations.

•Detailed knowledge of compliance practices, corporate policies, laws and regulations governing BCP/DRP.

•Problem analysis and resolutions; ability to analyze complex issues and translate into clear and concise reports to facilitate decisions required from senior management; collect data, establish facts, and draw valid conclusions.

•Excellent written and oral communication, presentation and organization skills.

•Excellent interpersonal skills (credible, cooperative, and supportive); builds trust with relevant stakeholders, and other business leaders to support plan development, maintenance, testing, and executions.

•Ability to lead projects and work autonomously with minimal supervision.

•Proficient in Microsoft Word, Excel, PowerPoint, and Visio.

•Excellent project and time management skills

Preferred Qualifications

•Experience with scripting languages to automate tasks and manipulate data

•Experience with integrating solutions in a multi-vendor environment

•Knowledge of business operations

•Experience with enterprise-scale operations and maintenance environments 

•Experience with various security tools

•Ability to multitask and solve complex technical problems

•Experience working in a multi-server environment

•CBCP Certification

•PMP Certification

•ITIL v3 - Foundation

•Experience with Microsoft Visio and PowerPoint

•Adaptable to changing circumstances and operational needs

•Understanding of NIST and other regulatory standards

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

#Remote

About Leidos

Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 45,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $14.4 billion for the fiscal year ended December 30, 2022.  For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.