Sr Administrator (Support & Operations)

Job Summary

 Security GRC + BCP/DR - L2 Job Title Security GRC & Business Continuity / Disaster Recovery Analyst (L2) Role Overview The Security GRC + BCP/DR Analyst (L2) is responsible for supporting the organization\'s Governance, Risk, and Compliance (GRC) program while ensuring effective Business Continuity Planning (BCP) and Disaster Recovery (DR) readiness. The role focuses on risk assessments, compliance monitoring, policy management, continuity planning, disaster recovery testing, and stakeholder coordination to strengthen organizational resilience and regulatory compliance.

Key Responsibilities

Experience: 3-5 Years Key Responsibilities Governance, Risk & Compliance (GRC) • Conduct information security risk assessments and maintain risk registers. • Monitor compliance against organizational security policies, standards, and regulatory requirements. • Support security audits, compliance reviews, and remediation tracking. • Assist in developing, reviewing, and updating security policies, procedures, and standards. • Perform control assessments and gap analyses against industry frameworks. • Track security exceptions and risk acceptance processes. • Develop governance metrics, compliance dashboards, and management reports. Business Continuity Planning (BCP) • Support the development and maintenance of Business Continuity Plans across business units. • Facilitate Business Impact Analysis (BIA) exercises. • Identify critical business functions, dependencies, and recovery requirements. • Coordinate periodic reviews and updates of BCP documentation. • Conduct awareness sessions and tabletop exercises for business stakeholders. Disaster Recovery (DR) • Support Disaster Recovery planning and testing activities. • Coordinate DR drills and recovery validation exercises. • Monitor DR readiness and ensure recovery objectives (RTO/RPO) are maintained. • Collaborate with infrastructure, cloud, network, and application teams on DR strategies. • Document lessons learned and track remediation actions following DR exercises. Stakeholder & Vendor Coordination • Work with business owners, IT teams, auditors, and management. • Coordinate compliance evidence collection and audit responses. • Support third-party risk assessment and vendor compliance reviews. • Escalate critical risks, compliance gaps, and continuity issues appropriately.

Skill Requirements

Required Technical Skills GRC • Risk Management Methodologies • Compliance Management • Policy & Standards Management • Control Testing and Assessment • Risk Register Management • Third-Party Risk Management Frameworks & Standards • ISO 27001 • NIST Cybersecurity Framework • ISO 22301 (Business Continuity Management) • COBIT • CIS Controls • SOC 2 • PCI-DSS (Preferred) BCP & DR • Business Impact Analysis (BIA) • Recovery Time Objective (RTO) • Recovery Point Objective (RPO) • Crisis Management • Disaster Recovery Planning • Business Continuity Exercises & Testing Tools • ServiceNow GRC • Archer GRC • Microsoft Office Suite • Power BI • Risk & Compliance Management Platforms

Other Requirements

Required Soft Skills • Strong analytical and risk assessment skills. • Excellent documentation and reporting capabilities. • Effective communication and stakeholder management. • Presentation and facilitation skills. • Problem-solving and decision-making abilities. • Ability to coordinate cross-functional teams. ________________________________________ Experience • 3-5 years of experience in Information Security, GRC, Risk Management, Business Continuity, or Disaster Recovery. • Experience supporting audits, compliance assessments, and risk management processes. • Exposure to BCP and DR planning, testing, and governance activities. • Experience working in enterprise IT environments. ________________________________________ Preferred Certifications • ISO 27001 Lead Implementer / Lead Auditor • ISO 22301 Business Continuity Certification • Certified in Risk and Information Systems Control (CRISC) • CISA • CISSP (Preferred) • CBCI (Certificate of the Business Continuity Institute) • Microsoft Security Certifications (SC-900, SC-200) ________________________________________ Key Performance Indicators (KPIs) • Compliance Assessment Completion Rate • Risk Assessment Closure Rate • Audit Findings Remediation Timeliness • BCP Review and Update Compliance • DR Test Success Rate • RTO/RPO Achievement Metrics • Reduction in Open High-Risk Findings • Stakeholder Satisfaction and Governance Effectiveness