Hybrid Business Resilience Exercise Manager bei FS-ISAC

BACKGROUND

FS-ISAC is a member-driven, 501 (c)6, not-for-profit organization that advances cybersecurity and resilience in the global financial system, protecting financial institutions and the individuals they serve. The real-time information-sharing network amplifies the intelligence, knowledge, and practices of its members for the financial sector’s collective security and defense. FS-ISAC is headquartered in the US, with primary offices in Singapore, The Hague, and the UK.

POSITION SUMMARY

The Business Resilience Exercise Manager is a member of the FS-ISAC’s Resilience team, reporting to FS-ISAC Director for Global Business Resilience, and is responsible for overseeing all aspects of the FS-ISAC Americas exercises, and coordinate scenario development globally. The Business Resilience Exercise Manager will work in close coordination with the Director of Exercises, who is the project manager for all exercises across the three regions (Americas, APAC, EMEA). The Business Resilience Exercise Manager will focus on threat simulation, continuity planning, and incident response management by working with members and stakeholders to develop and execute exercises, and conduct post-exercise activities, including developing after-action reports and action plans.

Americas exercises include, but are not limited to FS-ISAC Summit exercises, Financial Services Sector Coordinating Council (FSSCC)/Financial and Banking Information Infrastructure Committee (FBIIC) Joint Exercises (via the Joint Exercise Committee), Steel Resolve, Cyber Paladin, Tri-Sector, and special event exercises. In addition, the Business Resilience Exercise Manager is responsible for tracking and supporting (as appropriate) non-FS-ISAC exercises. This position is expected to act independently and with minimal support to manage all Americas exercises, conduct research, work with members and stakeholders to develop exercise scenarios, and manage relationships with member organizations.

The successful candidate will have a background in exercise development and execution, threat simulation, continuity planning, incident management, stakeholder engagement, and research and report writing. This position is public facing, regularly working with and presenting to members and partners or government organizations.

ESSENTIAL FUNCTIONS

• Lead efforts to develop and execute Americas exercises:

- Support project planning efforts for multiple exercises to achieve FS-ISAC/Resilience team goals

- Design and develop exercise materials for all Americas exercises (situation manuals, exercise plans, after action reports, and other such documentation to support meeting and exercise facilitation)

- Gather subject matter expertise across teams to build exercise scenarios and injects

- Work with members and stakeholders to identify exercise topics, develop scenarios, and recruit exercise participants

- Work closely with FS-ISAC regional staff to inform FS-ISAC members about exercises and business resilience activities among members, regulators, and government agencies

• Support the FSSCC/FBIIC Joint Exercise Committee, including scheduling and running meetings

• Prepare regular reports on exercise program activities to different audiences, including the FS-ISAC Board of Directors

• Percentage of travel: 15-20%

• Perform other assignments as needed

POSITION QUALIFICATIONS

• At least 4-7 years of direct experience developing and managing exercise

• Knowledge of resilience and cybersecurity concepts, operational resilience principles

• Strong project management skills; PMP certification preferred but not required

- Ability to plan, coordinate, and implement multiple activities successfully and on time

- Highly-developed prioritization skills with flexibility to expand workload and reorganize priorities

• Outstanding writing skills

• Strong analytical ability to conduct research and use intuition and experience to complement data

• Ability to understand business implications; experience learning, applying business cultures from around the world

• Strong interpersonal skills and ability to effectively interact with individuals with varied backgrounds and experiences

• Ability to speak clearly and persuasively as well as listen and obtain clarification

• Provide organizational support and follow established policies and procedures

• Complete administrative tasks correctly and on time; support organization's goals and values

EDUCATION AND EXPERIENCE

• An undergraduate degree with 4-7 years of experience in risk analysis or similar with transferrable skills; in lieu of an undergraduate degree, 7-10 years of related experience

• Strong understanding of the exercise process, preferably familiar with Homeland Security Exercise and Evaluation Program or similar principles

• Strong understanding of incident response and operational risk planning

• Financial sector experience preferred

WORK ENVIRONMENT

This position reports into Reston, Virginia, headquarters on a hybrid schedule, as is required to be in office two days a week for “team days” and other locations in the DC area or other locations as needed for meetings. The candidate must be able to meet the physical demands of the position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

FS-ISAC has reviewed this description to ensure that essential functions and basic duties have been included. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate.

All employees must be authorized to work in the United States. FS-ISAC provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, FS-ISAC complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.