Director, Business Continuity Management

Description

Here, we believe there's not one path to success, we believe in careers that grow with you. Whoever you are or wherever you come from in the world, there's a place for you at Sherwin Williams. We provide you with the opportunity to explore your curiosity and drive us forward. We'll give you the space to share your strengths and we want you to show us what you can do. You can innovate, grow and discover in a place where you can thrive and Let Your Colors Show! Sherwin-Williams values the unique talents and abilities from all backgrounds and characteristics. All qualified individuals are encouraged to apply, including individuals with disabilities and Protected Veterans.

CORE RESPONSIBILITIES AND TASKS

The Director, Business Continuity Management will manage and lead the enterprise resilience programs across the organization. This role will be responsible for the management of Enterprise level programs, specifically developed and implemented to ensure the company has in place the necessary processes and programs to respond and recover from significant business disruptions. Responsibilities include coordinating and facilitating the design, development, maintenance and testing of crisis response and recovery plans for critical corporate functions and operating unit processes to ensure an integrated approach for BCM processes across the Company. This position will also lead the management of the BCM efforts with IT disaster response/recovery plans. To be successful in this role, the Director is skilled in current Business Continuity management process and platforms with a strong understanding of infrastructure operations and related technologies. This role reports directly to the Deputy Chief Information Security Officer.

Success in role requires an authentic people leader with strong leadership experience who will be able to balance team objectives, hands-on leadership of the varied Business Continuity processes and collaboration across multiple IT and business organizations. Leadership and vision in driving the future state objectives of the organization in alignment with Cybersecurity and business goals will be essential to success. This individual will engage with peers to understand business and technology objectives with priorities and bring those objectives into alignment with the organization's BCM requirements.

1. Developing and maintaining detailed guidance on the overall enterprise resilience programs, to include the identification, assessment, and mitigation plans for a broad range of business disruptions

2. Facilitating engagement and interaction across BUs and central support functions to align approaches and share best practices

3. Working closely with BU leadership and internal stakeholders to align stakeholder priorities with operational planning.

4. Maintaining a single view of risks (of disruption) to important business services and work being done to mitigate those risks

5. Managing and facilitating sufficient exercises, simulations, and tests to validate the effectiveness of resilience program

6. Management of enterprise resilience governance program and synchronization with overall Cybersecurity governance and prioritization

CAPABILITIES

• Business Acumen and Partnering
• Business Partnering and Ideation
• Determining criticality of business services and supporting systems
• Mapping and understanding critical end-to-end business services
• Business continuity strategy and planning
• Designing application resilience and recoverability
• Managing business continuity management system
• Managing emergency notification system (or problem management)
• Aligning criticality and capabilities with third party risk program
• Conducting exercises, tests and simulations that validate the overall recoverability of end-to-end business services
• Review of cloud and SaaS recoverability strategies
• Monitoring of infrastructure resilience - security, storage, network
• Education and awareness of resilience responsibilities within business, technology and support functions

POSITION REQUIREMENTS

FORMAL EDUCATION:

Required:

• Bachelor's Degree (or foreign equivalent) or in lieu of a degree, at least 12 years in experience in the field of Information Technology or Business (work experience or a combination of education and work experience in the field of Information Technology or Business).

Preferred:

• Master's degree in Computer Science, Cyber Security, Information Technology, Risk Management, or related field; or equivalent experience
• Certifications: CRISC, CISM, CISA

KNOWLEDGE & EXPERIENCE:

Required:

• 12 years leading projects.
• 10 years of operational resilience and/or business continuity management experience
• 8 years leading direct reports
• 7 years of experience with management of regulatory requirements and leading practices within operational resilience
• 7 years with enterprise resilience or business continuity programs
• 7 years of experience with common technology control and risk management frameworks like NIST CSF, Secure Controls Framework (SCF) ISO 27000 series, SOC 2, and compliance regimes like Sarbanes Oxley, GDPR, CCPA, etc.

Preferred:

• 10 years working in the Manufacturing or Consumer Products industry

TECHNICAL/SKILL REQUIREMENTS:

Required:

• Broad knowledge of common standards, frameworks, and regulatory requirements
• Ability to observe business, understand pain-points and break-through legacy systems and processes
• Recommend innovative & transformation solutions with strong ROI
• Clear and concise verbal and written communication
• Ability to lead through influence, including at executive levels

Preferred:

• Auditing across a range of Business Continuity and Disaster Recovery capabilities

Must be legally authorized to work in the country of employment without sponsorship for employment visa status now or in the future.

Sherwin-Williams is proud to be an Equal Employment Opportunity/Affirmative Action employer committed to an inclusive and diverse workplace. All qualified candidates will receive consideration for employment and will not be discriminated against based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, pregnancy, genetic information, creed, marital status or any other consideration prohibited by law or by contract.

As a VEVRAA Federal Contractor, Sherwin-Williams requests state and local employment services delivery systems to provide priority referral of Protected Veterans.