Business Continuity Plan Manager

Business Continuity Plan Manager

PacifiCorp is seeking customer-centric candidates to grow and sustain our commitment to a culture of customer service excellence, environmental sustainability, inclusion & belonging.

General Purpose: Support a corporate wide security assurance program that addresses business continuity management, incident management, security awareness, security policies and compliance with regulatory and information system requirements. Implement business objectives, strategies, and plans.

Responsibilities: As a senior subject matter expert and lead specialist related to all aspects of business continuity practices, work with multiple business units regarding assessment of potential business impact of a disruption; identification and definition of critical, time-sensitive functions; and design, development, and documentation of business unit business recovery plans. Work with IT and Security to ensure that technology and cyber security plans align with business continuity plans. Create, implement, and maintain business recovery plans, security policies, standards, training programs, and processes, in the corporate recovery planning tool. Ensure all applicable business recovery plans and cyber-security incident response plans are documented and exercised according to applicable regulations (e.g., SOX, ISMS and CIP-008, 009, 012). Provide subject matter expertise on related regulatory requirements. Serve as the administrator of the corporate planning tool and as a liaison for PacifiCorp business units. Primary approver and account holder for the Bold Planning application. Train business contacts on use of the business recovery and technology recovery planning tool. Develop and facilitate business and technology incident response and recovery exercises. Serve as lead planner within the Emergency Management team for PacifiCorp for GridEx (coordinate BCPs, TRPs, and outside agencies). Assist in the development and implementation of security awareness materials including but not limited to presentations, phishing campaigns, bulletins and newsletter articles in coordination with the Corporate IT Disaster Recovery planner. Liaison with the Corporate Facilities team to assist in maintaining business recovery facilities to ensure that internal recovery sites are updated and functioning properly. Manage relationships for business recovery, emergency response and other security-related services. Participate in the development of company strategies and mission critical technologies. Assist in the implementation and release of new and existing business recovery assessments, planning software, and physical access control systems. Ensure projects are completed within committed time and budget. Coordinate with internal and external emergency management representatives and participate in federal, state, county, and city agency planning activities and exercises. Submit documentation to audit and compliance for ISMS and EOP -008 requirements (Distribute Change Control and final plan to Lead to share with Team Members or include Team Members in email) Document exercise plans, agenda and after-action reports for exercises and incidents (evidence includes invitations, agenda, exercise plan (or scenario presentation), post-exercise review) Work with application owners to ensure all Restoration Exercises are conducted and proper documentation is included and available upon request for auditors/regulators.. Create Team Verification process to ensure plans remain compliant. Participate in weekly BHE Incident Response Management, Emergency Resiliency, and BOLD Planning tool meetings. Participate in monthly IT – ICS planning and meeting.

Requirements: Bachelor's degree in computer science, Information Technology, or related field; or equivalent work experience. (Typically, four years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor's degree. A minimum of three years additional directly related technical experience is required.) Seven years of professional experience in business, technology recovery, emergency management, and security planning. Experience in developing and conducting complex business response and recovery exercises. Knowledge of information and operational technology terms, equipment, systems, functions, and major vendors. Excellent oral and written communication skills, including presentation skills. Effective interpersonal skills and customer relationship skills. Effective analytical, problem-solving, and decision-making skills. Project management skills: ability to prioritize and handle multiple tasks and projects concurrently.

Preferences: Relevant Professional certifications in BCP DR, and EM (e.g., Certified Business Continuity Professional [CBCP] / master's Business Continuity Professional [MBCP], Certified Emergency Manager (CEM) preferred.