Supply Chain Associate Director - Business Continuity and Resilience

Job Description

Position Summary:

As part of the Supply Chain Shared Services organization, and reporting to the Director of Commercial Supply Chain Risk Management, the Associate Director (AD), Commercial Supply Chain Business Continuity and Resilience Lead is responsible for developing, implementing, and managing the supply chain organization’s business continuity and resilience program. This role ensures the organization can respond effectively and timely to disruptions (both internal or across our supply chains), safeguarding critical processes, assets, and services. The position works cross-functionally (modality-agnostic) across the Biopharmaceutical Sciences and Manufacturing Operations (BSMO) organization, such as CMSC Risk Management, Technical Operations, Supply Chain Planning, Logistics, Project and Program Management, External Manufacturing, among others, in identifying business continuity and supply chain disruption risks, develop and maintain internal Business Continuity Plans, Supply Chain Disruption Mitigation Plans, and ensure readiness through stress-testing plans, training, and continuous improvement. In addition, the AD will collaborate with other key stakeholders across Vertex to ensure alignment, visibility, and enabling an end-to-end, integrated approach to operational resilience at Vertex. This role may transition to a people management role in the future.

Key Duties and Responsibilities:

• Business Continuity Program Development
  • Design and implement a comprehensive business continuity framework that aligns with organizational goals and regulatory requirements.
  • Develop and maintain Business Impact Analyses (BIA) to identify critical processes, dependencies, and recovery time objectives (RTO) with support from functions’ points of contact.
  • Create, update, and document business continuity plans (BCP) for all functional areas, and supply chain disruption mitigation plans to address vulnerabilities identified across commercial programs and their respective supply chain nodes.
• Risk Assessment and Mitigation
  • Identify potential threats, vulnerabilities, and operational risks that could disrupt business processes.
  • Collaborate with leadership and key stakeholders to develop and implement supply chain disruption mitigation strategies and plans to address vulnerabilities identified across Vertex’s commercial supply chain.
  • Monitor emerging risks (e.g., cyber threats, supply chain disruptions, geopolitical risks) that impact continuity.
  • Represents Commercial Manufacturing and Supply Chain at Mid- to Senior-Leader level forums, communicating overall risk profile and mitigations.
• Testing, Training, and Exercises
  • Plan and execute regular business continuity testing, including tabletop exercises, drills, and simulations.
  • Assess test results, identify gaps, and ensure corrective actions are implemented.
  • Develop training programs to educate employees on business continuity roles, responsibilities, and procedure.
• Incident and Crisis Management
  • Lead and coordinate incident response efforts during disruptions to minimize downtime and business impact.
  • Serve as a point of contact for crisis management teams, ensuring communication and escalation protocols are followed.
  • Support post-incident reviews and lessons-learned sessions to improve resilience measures.
• Stakeholder Engagement and Reporting
  • Collaborate with internal teams across Commercial Manufacturing and Supply Chain (CMSC) and business partners (e.g. DTE, Corporate Risk Management & Resilience, QA, etc.) to align business continuity strategies.
  • Establishes and monitors key performance metrics for the Business Continuity processes.
  • Provide regular reports and updates to senior management on program status, risks, and improvements.
• Continuous Improvement
  • Monitor and evaluate the effectiveness of the business continuity program, ensuring it evolves with business changes.
  • Collaborate with key business partners on implementing improvements and opportunity areas.
  • Stay current on industry best practices, regulatory requirements, and standards (e.g., ISO 22301, NIST).
  • Implement tools and technologies to support business continuity planning and crisis management.
  • Represents CMSC on projects related to business continuity improvement initiatives.

Knowledge and Skills:

• Strong knowledge of business continuity frameworks, standards (ISO 22301, DRII), and risk management principles.
• Proficiency in business continuity planning tools and software (e.g. Riskonnect or similar).
• Strong project management skills and the ability to prioritize tasks in