Technology Resilience Manager

Role Title: Technology Resilience Manager

What is this job really like

Reporting to the Head of Operational and Technical Resilience, the Technology Resilience Manager is responsible for the development, maintenance and operation of a robust technology resilience function within Intact Insurance Ireland (Intact) which will:

• Enhance the resilience posture of Intact the availability and delivery of its Important Functions and Important Business Services.
• Through a structured approach enhance the resilience of the wider technology stack in alignment with the business risk appetite.
• Enable the business to comply with both its policy and regulatory obligations.

As part of the First Line of Defence, this function provides technology resilience assurance to the business through identification of risks, while recommending technology improvement actions, supporting the implementation of controls, validating the design and effectiveness of controls and reporting on progress. In turn this provides assurance to the Intact Executive, Board and Regulator regarding the effectiveness of controls and processes in place to support the response to, and recovery of technology services in the event of a major technology related incident.

The Intact Operational and Technical Resilience function supports Technology and Operational Resilience, Business Continuity and Crisis Management for all of our Ireland Operations (Intact & 123.ie). Working with colleagues within the wider Integrated Technology Services team and our IT Outsourced Services partners, the remit of the function spans all aspects of people, process, technology and location continuity and management of Technology Risk.

Technology Resilience is seen as a key pillar of our operational capability; it supports Intacts’s customer centric strategy as well being a key regulatory focus. It is also closely aligned with our cyber resilience capability and the successful candidate will work closely with colleagues in functions including but not limited to the Information Security and Service Delivery functions in making Intact more holistically resilient through engagement with colleagues in Intact UK and International and Intact Group.

The successful candidate will possess a proven track record that demonstrates subject matter expertise and leadership in Technology Resilience / Disaster Recovery. The candidate must have the ability to co-ordinate and participate in multi-disciplinary teams in complex operating environments with the added capability to engage and influence business stakeholders.

The Cross Industry Guidance on Operational Resilience, Cross Industry Guidance on Outsourcing and now (EU) 2022/2554 Digital Operational Resilience Act have resulted in resilience transforming into a discipline with a significant level of regulatory oversight, what was once discretionary is now mandatory. The successful candidate will leverage their experience to enable the business ensure its continued compliance with these regulatory structures to enable the business secure prescribed regulated outcomes.

This is an opportunity to join a highly engaged team with scope for exposure across the Resilience function and wider Architecture, Resilience and Information Security functions in which Technical Resilience is based.

Responsibilities

The Technology Resilience Framework governs the scope of this role and key responsibilities follow.

Operations Management

• Incident Commander for live invocations in line with documented roles and responsibilities.
• Support the delivery of business projects with a technology resilience bias or a dependency on technology, while also managing those resilience-initiated projects.
• Participation on architecture design and change fora.
• Coordinate the inputs from technical teams, both internal and external stakeholders.
• Maintenance and development of the DR Framework and all supporting documented structures.
• Horizon scanning the legal and regulatory environment.
• Engagement with the Three Lines of Defence.
• Ensure the alignment of DR with Major Incident Management processes and procedures with clear delineation of role and responsibilities.
• Provide training and awareness programs to educate IT staff on disaster recovery best practices and procedures.
• Actively mentors and helps further the knowledge and skills of ITS personnel on DR.
• Maintain the currency of the Resilience Management System.
• Conduct thorough risk assessments to identify and treat potential vulnerabilities.

Situational Readiness Posture

• Maintain situational readiness of the technology stack and those stakeholders necessary to support the recovery efforts in the event of a live invocation.
• Respond promptly to disaster events, coordinate recovery efforts, and communicate with stakeholders to ensure timely resolution and minimal business disruption.
• Demonstrate and provide assurance on readiness through exercising and testing.

Third Party Management

• Management and co-ordination of our third-party partners in support of our technology performance objectives.
• Support the production of high-quality and accurate responses in answer to formal and informal customer and regulatory requests.
• Assessment of the resilience posture of third parties supporting Important Functions via Third-Party Risk Assessments.

Competencies

• Highly developed analytical and interpersonal skills.
• Proficiency in managing and co-ordinating DR response within cloud environments (Azure preferred) while working with technical teams in the design on the recovery solutions.
• Track record of leading complex, high-impact DR projects.
• Familiarity with Agile methodologies , Operational Resilience and Business Continuity principles.
• Ability to craft innovative solutions for complex DR challenges.
• Ability to communicate complex technical concepts to executive leadership and lead cross-functional teams.
• Ability work independently and as part of a team.
• Familiarity with Operational Resilience and an understanding of the key components and capabilities that sit within it (e.g. BCM, Crisis Management, Technology Resilience, Third Party Risk Management, etc.).
• Experience of interpreting policies or regulations and creating / or augmenting a Resilience Framework that is compliant, proportionate and sustainable on an enduring basis.
• An understanding of modern governance, risk and control frameworks, including the Three Lines of Defence.
• Networking and senior stakeholder management skills and ability to negotiate and influence effectively.
• Maintains an up-to-date understanding of industry best practices.
• Comfortable providing a strategic vision to peers to make sure everybody is working to achieve the same goal.
• Experience with understanding and translating complex business requirements in a fast-paced, evolving environment.
• Engages with teams to make change happen.
• Continuous improvement mind-set; challenges the status quo and seeks self-improvement.

Preferred experience / exposure

• Disaster Recovery experience in a Microsoft Azure environment.
• Development of a Disaster / Technical Resilience Management System in a greenfield context.
• Experience managing resilience in a multi-vendor environment.
• Enterprise or solution architecture background.
• Operations or incident management background.