Business Continuity Program Manager

Job Title: Business Continuity Program Manager (BCP, Disaster Recovery, and Physical Security)

Department: Risk Management 

Department Location: Littleton, MA                                                                                   

Reports to: Chief Risk Officer                      

Career Stream: Individual Contributor        

Classification: Hybrid                                               

Compensation: The budgeted base pay range is between $115k - $135k. Actual compensation offered may vary from the posted hiring range based on factors such as relevant experience, time in role, base salary of internal peers, prior performance, business sector, licensure requirements and/or skill level, and will be finalized at the time of offer.   

The Business Continuity Program Manager will be responsible for the creation and ongoing management of the Credit Union’s enterprise-wide Business Continuity Plan (BCP) and Disaster Recovery, as well as Physical Security Programs. This role ensures compliance with federal and state regulations, guides the organization through risk management processes, and leads training and awareness efforts. The ideal candidate will bring a combination of technical expertise, leadership, and excellent communication skills to oversee risk assessments, regulatory compliance, and disaster recovery planning. 

BCP/DR and Physical Security Programs (collectively, the “Program”):

• Serve as the primary driver of the Program and related processes at Workers. 
• Oversee the day-to-day efforts to develop, implement, and maintain an effective enterprise-wide Program, including the policies and related procedures.
• Ensure that employees adhere to the requirements outlined in the Program policies and procedures.
• Conduct business impact analysis and risk assessments. 
• Monitor and provide adequate course of action to management on environmental concerns and/or threats to the operations of the Credit Union. 
• Respond to emergencies and physical losses, mitigate incidents, and plan to avoid them in the future. 
• Partner with the Risk Management Department, Operations, Information Technology, and Information Security to define standards and provide subject-matter- expertise to oversee enterprise-wide business resiliency risks. Based on knowledge and expertise, make recommendations to senior management on the best course of action.
• Develop and coordinate tabletop and functional exercises to ensure the effectiveness of the Program.
• Lead training and awareness efforts required to increase employee understanding of the Program. Includes developing, creating, and delivering related training and materials to all employee's enterprise-wise.
• Oversee the completion of the Program risk assessments.
• Evaluate the impact on the Program of new products, services, and third-party vendors.
• Develop and prepare an effective and comprehensive monthly and quarterly risk reporting and analysis package for Management, Risk Oversight Committee, NCUA (as requested), Supervisory Committee, and the Board of Directors.  
• Work collaboratively with business unit leaders; Develop strategies to address unusually complex or difficult information and physical security risk scenarios.
• Maintain knowledge of FFIEC, regulatory, and industry guidelines. 
• Monitor and provide updates to new laws, regulations, and guidance related to the Program.

Incident Response Team:

• Lead and/or assist the CRO in leading the Incident Response Team, and in maintaining the Program Incident Response Plan. 
• Ensure timely reporting of incidents to meet regulatory guidelines. 
• Report to local, state, and federal regulatory agencies and/or members, as appropriate.
• Additional duties as assigned by the CRO.

Additional Responsibilities: 

• Stay informed about relevant regulations, guidelines, and industry trends.
• Develop and present reports to the Risk Oversight Committee, Supervisory Committee, and Board of Directors.
• Collaborate with business unit leaders to resolve complex security risk scenarios.

Qualifications:

• Bachelor’s degree required; preferably in a related field.
• At least 7 years of experience in business continuity, disaster recovery, and physical security risk management in a banking or credit union environment.
• Strong knowledge of FFIEC guidelines, banking regulations, and industry best practices.
• Excellent communication and presentation skills, with the ability to clearly articulate complex concepts.
• Experience with IT systems, GRC platforms, and advanced Microsoft Office skills.
• Project management experience, with a proven ability to lead cross-functional initiatives.
• Certifications in Business Continuity (CBCP, CBCI, EDRP) preferred.

About Workers Credit Union: Since 1914, Workers Credit Union has existed to Improve the Daily Lives of our Members. We deliver on our core purpose by partnering with our members to help them make their best financial choices and improve their financial wellness. We call this The Workers Way and this is at the center of everything we do. Through our specialized financial counseling, we are pioneering a new member experience through high-touch service and convenient technology. We have grown to over 2.6 Billion in assets and serve over 120,000 members. We are one of the top performing credit unions in Massachusetts with big plans for the future!

Benefits:

• Comprehensive medical, dental and vision plans
• Basic life and AD&D insurance, short-term disability and long-term disability
• 15+ days of paid time off (PTO) per year
• Up to 16 hours of volunteer time off (VTO) per year 
• 11+ paid holidays
• 401(k) that includes a Safe Harbor Match of up to 4%.
• Tuition Reimbursement Program 
• Mental health resources including an Employee Assistance Program (EAP)
• Individualized learning and development programs

EEO Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.