Disaster Recovery / Business Continuity Consultantm [Healthcare industry]

WHO WE ARE

Datamtx ( / formerly Datamatics) established in 1993 is globally HQ'd in Atlanta with a stellar history supporting both Tier 1 and 2 ERP / MES projects including: S/4HANA, JDE, Oracle Cloud ERP, Peoplesoft, Deltek, Infor (M3 / S3 / Syteline / LN / Factory Track / MacPac XE / LX, XA, CPQ), IFS, Deltek, Blackbaud, Ellucian Banner, D365, SysPro, Epicor, Plex, BlackLine, etc..

Our ERP / MES projects cover the gamut of typical implementation but we also support bespoke projects and specialty staffing needs covering: data cleanse, customizations, lift & shift, cloud & data migrations, M&A consolidations, Hypercare and Day 1 support. We are also globally partnered with some of some of the Top Accounting, Advisory and Audit firms.

(400-Hour Remote Engagement)

Flexible Hours / Part-time Acceptable

Engagement Period: Nov'26-Apr'27

Position Summary

DataMTX is seeking a senior Disaster Recovery (DR) and Business Continuity Planning (BCP) Consultant to support a healthcare client in strengthening organizational resilience, disaster preparedness, cyber recovery capabilities, and healthcare continuity operations.

The consultant will evaluate current-state recovery processes, conduct Business Impact Analysis (BIA) workshops, assess technology recovery readiness, develop recovery strategies, update policies and procedures, facilitate tabletop exercises, and deliver actionable recommendations aligned with healthcare regulatory requirements and industry best practices.

Expected Scope of Work

Phase 1: Current-State Assessment (80 Hours)

• Review existing BCP, DR, Emergency Operations, and Incident Response documentation
• Assess current disaster recovery architecture and backup strategies
• Review healthcare application dependencies
• Evaluate recovery capabilities for:
• EHR / EMR systems
• Clinical applications
• Imaging systems (PACS)
• ERP / Financial systems
• Identity and access management
• Network infrastructure
• Cloud services
• End-user computing
• Review cybersecurity resilience controls

Phase 2: Business Impact Analysis (BIA) (80 Hours)

Facilitate workshops with:

• Clinical Operations
• Emergency Department
• Laboratory Services
• Imaging
• Pharmacy
• Revenue Cycle
• Finance
• Human Resources
• IT
• Executive Leadership

Identify:

• Critical business processes
• Recovery Time Objectives (RTO)
• Recovery Point Objectives (RPO)
• Minimum staffing requirements
• Downtime procedures
• Third-party dependencies

Phase 3: DR & BCP Strategy Development (100 Hours)

Develop:

• Enterprise Business Continuity Plan
• Technology Disaster Recovery Plan
• Cyber Recovery Plan
• Emergency Communications Plan
• Incident Escalation Procedures
• Recovery Runbooks
• Application Recovery Sequencing

Specific focus areas:

• Ransomware recovery
• Extended power outages
• Data center failures
• Network outages
• Cloud service disruptions
• Medical device interruptions
• Regional disasters
• Pandemic response readiness

Phase 4: Testing & Validation (80 Hours)

Execute:

• Tabletop exercises
• Executive crisis simulations
• Clinical downtime exercises
• Disaster recovery testing reviews
• Recovery procedure validation

Deliver:

• Gap Analysis Report
• Lessons Learned Register
• Remediation Roadmap

Phase 5: Executive Reporting & Roadmap (60 Hours)

Provide:

• Current-State Maturity Assessment
• Risk Register
• Recovery Readiness Scorecard
• Regulatory Alignment Assessment
• 12-Month Improvement Roadmap
• Executive Presentation

Required Experience

Healthcare

• 8+ years Business Continuity and Disaster Recovery consulting experience
• Experience supporting hospitals or integrated health systems
• Knowledge of healthcare operational workflows
• Experience with Joint Commission readiness programs
• Familiarity with emergency preparedness programs

Technical

• Disaster Recovery strategy development
• Business Continuity Planning
• Business Impact Analysis
• Cyber Resilience programs
• Ransomware recovery planning
• Backup and recovery architecture
• Cloud DR strategies (Azure, AWS, M365)
• Identity and access recovery
• Network and infrastructure recovery

Compliance & Frameworks

Experience with:

• HIPAA
• NIST CSF
• NIST 800-34
• HHS Healthcare Cybersecurity Guidelines
• CMS Emergency Preparedness Requirements
• FEMA Incident Command System (ICS)
• Joint Commission Emergency Management Standards

Preferred Certifications

Two or more of:

• CBCP (Certified Business Continuity Professional)
• MBCI (Member, Business Continuity Institute)
• ISO 22301 Lead Implementer
• CISSP
• CISM
• CRISC
• PMP
• Healthcare Information Security & Privacy Practitioner (HCISPP)

Deliverables

At completion, our client should receive:

1. Enterprise Business Continuity Plan
2. Disaster Recovery Program Assessment
3. Business Impact Analysis Report
4. Recovery Tier Matrix
5. Application Dependency Mapping
6. RTO/RPO Definition Matrix
7. Cyber Recovery Playbook
8. Executive Crisis Communications Plan
9. Disaster Recovery Test Scripts
10. Tabletop Exercise Materials
11. Gap Assessment & Risk Register
12. Remediation Roadmap & Budget Recommendations