Cyber Security Analyst 100% Remote

Role Overview

The Senior Cyber Security Analyst – Governance (Disaster Recovery) will govern and oversee the organization’s disaster recovery (DR) program to ensure resilience and recoverability of critical IT systems. You will provide independent governance oversight across BIAs, DR planning, testing, risk management, and continuous improvement, partnering with application owners, technology teams, and risk/audit stakeholders.

Key Responsibilities

• Disaster Recovery Governance

  • Govern execution of the enterprise DR framework to ensure recoverability expectations are defined, implemented, and sustained.
  • Apply/enforce DR governance standards, processes, and controls.
  • Maintain oversight of DR scope, critical system classifications, recovery objectives, and assurance requirements.

• Business Impact Analysis (BIA) Oversight

  • Govern completion and ongoing maintenance of BIAs to identify critical applications, recovery objectives, and dependencies.
  • Review and challenge BIAs for quality, consistency, and alignment with enterprise resilience requirements.
  • Ensure BIAs remain current as business, technology, and risk change.

• Disaster Recovery Testing & Exercises

  • Provide governance oversight for disaster recovery simulations, tabletop exercises, and recovery tests.
  • Evaluate outcomes against defined recovery objectives.
  • Identify gaps/trends/weaknesses and recommend improvements to testing practices.

• Risk, Issues, and Corrective Action

  • Maintain oversight of DR-related risks, findings, and corrective action plans.
  • Ensure issues from BIAs, testing, and audits are documented, assigned, tracked, and remediated.
  • Monitor remediation progress and escalate risks/delays as needed.

• Audit & Continuous Improvement

  • Support internal/external audits by coordinating evidence and preparing governance documentation.
  • Ensure DR governance activities are audit-ready and defensible.
  • Drive continuous improvement by identifying recurring issues and recommending control/process enhancements.

• Advisory & Stakeholder Engagement

  • Advise application owners on DR planning and alignment with enterprise standards.
  • Act as an escalation point for complex DR governance issues.
  • Collaborate across IT, infrastructure, and cloud teams to ensure DR requirements are implemented and maintained.

Frameworks / Standards

• ISO 22301
• NIST SP 800-34