Business Resilience Engineer

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice.

At Regions, the Business Resilience Engineer helps the organization prepare and adapt to business disruptions from cyber threats to natural disasters, while maintaining critical bank operations, and safeguarding people, processes, and tools. Assists with the design and implementation of resilience strategies that improve the organization's ability to evolve, anticipate, withstand, and recover from cyber-attacks or other disruptions that impact critical business operations. Supports high-profile incident response and recovery activities for business or technology disruptions, including those cause by cyber-attacks, natural disaster, man-made disaster, and other crises scenarios. Takes direction and works closely with the Business Resilience manager to support the collaboration and testing of business process resilience plans. Drives the team’s analyses and testing of Information Technology’s response and recovery activities for technology disruptions.

Primary Responsibilities

• Leads the enhancement of the Business Impact Analysis (BIA) methodology and leads BIA sessions with business units throughout the company to help the organization prepare and adapt to business disruptions, including cyber security
• Partners with business process and technology owners to develop advanced cyber recovery strategies along with traditional strategies; test these strategies and technology recovery capabilities
• Identifies Business Units’ process interdependencies (between processes, data, and applications) and determines Regions’ critical path
• Plans, coordinates, and administers resilience exercises with business leaders to ensure soundness of operational and cyber resilience.
• Develops and updates process maps for resiliency management activities that reflect the department’s efforts to identify, protect, detect, respond, and recover from potential cyber threats and maintain situational awareness
• Ensures all frameworks, processes, procedures, and exercise methods meet or exceed regulations established by the FFIEC
• Develops communications including proposals, reports, presentations, and procedures (including recommendations) to all levels of management
• Develops and maintains detailed measurements on business resiliency, readiness, crisis, and incident reporting
• Develops comprehensive reporting including scheduling, tracking, and reporting on resiliency and the evaluation of test deficiencies and development of follow-up action plans
• Researches and remains current on the latest business resilience trends and assess applicability to Regions Bank
• Collaborates with management to ensure that team technical knowledge or skills gaps are addressed, and effective training procedures are developed
• Offers advice and guidance to junior engineers as a subject-matter expert
• Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or a related technical/business field and ten (10) years of experience in Business Continuity, Disaster Recovery, Incident Management/Response, Cyber Security, IT Risk Management, IT Audit or a combination of other directly related experience
• Or High School Diploma or GED and fourteen (14) years of experience in Business Continuity, Disaster Recovery, Incident Management/Response, Cyber Security, IT Risk Management, IT Audit or a combination of other directly related experience

Preferences

• Relevant Certification strongly preferred:  Certified Business Continuity Professional (CBCP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM)
• Experience in performing business impact analyses, cyber risk assessments, advanced recovery strategies and developing resiliency documentation
• Experience with light automation and reporting tools (e.g. SharePoint, JIRA, Power BI, Tableau, etc.)

Skills and Competencies

• Ability to develop and maintain relationships with employees of all levels
• Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance
• Strong analytical, critical thinking, problem resolution, and decision-making skills
• Strong influencing skills and ability to drive the Business Resilience agenda
• Strong interpersonal, written, and verbal communication skills
• Strong process and project management skills with the ability to improve process efficiency and effectiveness

Preferred Qualifications

• Hands-on experience with business continuity and/or operational resilience technology platforms, including ServiceNow Business Continuity Management (BCM) with experience leveraging workflow, reporting, metrics, and platform capabilities to improve program effectiveness and maturity.
• Demonstrated experience leading Business Continuity capabilities and teams including oversight and execution of Business Impact Analyses (BIAs), Business Continuity Plans (BCPs), plan maintenance, exercises/testing, and remediation of identified gaps.
• Proven experience designing and facilitating tabletop exercises, with the ability to develop realistic, engaging scenarios that validate recovery strategies, plans, roles, and decision making with business stakeholders.
• Strong understanding of Business Continuity and Operational Resilience frameworks and principles, with experience evolving continuity practices toward a more integrated, risk based operational resilience model, including identification of critical business services, dependencies, and resilience requirements.
• Working knowledge of the intersection between Business Continuity, Disaster Recovery, Crisis Management, Third Party Resilience and Cyber Incident Response, including how disruptions trigger business continuity activation and response procedures; familiarity with relevant industry standards and guidance such as NIST is preferred. (e.g., NIST SP 800-34, NIST Cybersecurity Framework)

This position is currently offsite, preferably close to a Regions office within the Birmingham, AL, Charlotte, NC, or Atlanta, GA areas. Associates will work from their home primarily and may be expected to go on site for meetings or other events as needed.

Regions will not sponsor applicants for work visas for this position at this time. Applicants for this position must currently be authorized to work in the United States on a full-time basis.

Compensation Details

Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job.

The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.

Job Range Target:

Minimum:

50th Percentile:

Incentive Pay Plans:

Location:

Equal Opportunity Employer/including Disabled/Veterans

Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.