Business Continuity and Resiliency Senior Manager

As a Business Continuity and Resiliency Senior Manager, you will be responsible for overseeing Hagerty’s Business Continuity/Resiliency Program and Crisis Communication. Under this position’s leadership, the Corporate Risk team will perform risk management activities that identify, assess, and reduce the impact of potential business disruptions on Hagerty’s employees, operations, and stakeholders.

The Business Continuity and Resiliency Senior Manager will be responsible for rebuilding and implementing Hagerty's business resilience plans, including conducting risk-based planning assessments and Business Impact Analysis (BIA)reviews across the organization and aligning with the Disaster Recovery Team on disaster recovery processes and plans. Through this rebuild, this role will strengthen Hagerty's operational resilience framework and policies, as well as ensure that a consistent framework is in place to systematically identify, measure, mitigate, report, monitor and manage the most significant resilience risks. The Business Continuity and Resiliency Senior Manager will also play an integral lead role on Hagerty’s Incident Management Team.

Ready to get in the driver’s seat? Join us! 

What you’ll do

Business Continuity/Operational Resiliency and Disaster Recovery

• Develop, review and coordinate the implementation of Hagerty’s Operational Resilience Policy in collaboration with the Enterprise Risk Management and Corporate Risk teams.
• Manage and execute the framework and methodology for Hagerty’s business resilience program.
• Lead the completion, and ongoing maintenance of business resilience plans for assigned departments and teams across the organization.
• Coordinate with Business Resilience Plan Owners on training and communication throughout their teams regarding incident management and business resiliency plans and procedures.
• Conduct BIA’s across the organization to collect information and develop appropriate mitigation solutions and disaster recovery strategies.
• Develop and maintain a consolidated BIA report, identifying main assets to be considered from the BIA results (e.g., critical IT applications, critical third parties, etc.) ensuring its validation and sign off by the respective business owner and Information Technology and ultimate approval by the Enterprise Risk Council.
• Work with the Disaster Recovery representative to define IT service continuity business requirements for each IT critical resource and / or service identified by Operational Resiliency Management.
• Ensure that critical applications are documented, have established recovery time objectives (RTO), and are able to be recovered within the agreed RTO.
• Coordinate the gathering of Service Continuity requirements from the business together with IT Disaster Recovery and ensure they are communicated to appropriate parties.
• Document, review and validate IT Service Continuity Management strategy at least once a year.
• Schedule and lead the facilitation and follow-up of Business Resilience exercises and IT Disaster Recovery testing.

Crisis / Incident Management

• Develop emergency response protocols and work with Incident Management sub-teams to ensure playbooks are in place.
• Optimize the overall Incident Management and Crisis Communication plans by reviewing and updating incident plans at least annually, and testing/exercising plans at least semi-annually.
• Provide training and communication to the enterprise to help develop and reinforce effective employee responses to an incident.
• Determine and document specific immediate-action steps to invoke Business Continuity and IT Disaster Recovery plans.
• Lead post-incident process reviews to ensure continuous improvement of operations and execution, and contribute to the improvement of the incident response process based on lessons learned; and
• Participate as a core member of the Incident Management team ensuring agreed processes are followed.
• Documentation of incident response team activities.
• Coordination of executive and board level communications during incidents based on severity.
• Test incident/crisis response plans and business continuity plans jointly to leverage and build on the plans strengths and unify approaches.

Additional Duties

• Analyze data gathered through observation, internal and external audits, interviews, surveys and reports, identifying and reporting findings, results, and recommendations.
• Identify of operational risks throughout the organization and recommend methodologies used to assess and manage the identified risks.
• Analyze risk trends and advise management on risks applicable to