Global Operational Resilience Specialist

Global Operational Resilience Specialist 

Office Location – Dublin, London, New York or Greenwich

This role is Hybrid – 3 days in the office per week

Interactive Brokers (“IBKR”) seeks an experienced Global Operational Resilience Specialist to serve as the accountable lead for the firm’s Operational Resilience Program. This position will report directly to the Chief Risk Officer based in London, U.K.

The goals for the position are:
Lead the implementation and maintenance of the Firmwide Operational Resilience (“OpRes”) Framework.

Provide subject matter expertise on industry standards and best practices on OpRes.

Guide business leaders on the practical application of rules and regulations.

Ensure compliance with the relevant regulations governing OpRes in the countries where IBKR operates.

Collaborate with the key stakeholders to integrate other programs with the OpRes Framework.

Deliver pragmatic solutions to enhance resilience to significant business disruptions and continue critical operations across the Firm. 

Key Responsibilities:

Governance

• Own and maintain all governance documentation for the Operational Resilience and BCM programs – strategy, policy, procedures, plans. 
• Work with senior leaders to maintain the list of critical business activities and set the risk appetite for Maximum Tolerable Downtimes (“MTDs”), Recovery Time & Point Objectives (“RTOs” and “RPOs”).
• Benchmark the OpRes program vs. global regulations and client expectations and highlight gaps - maintain all data and records in Fusion GRC tool to demonstrate compliance.
• Present to senior leadership as required.
• Training – build and work with L&D team to ensure OpRes and BCM training is provided to all necessary staff at least annually.
• Represent IBKR to regulators on all matters OpRes and BCM - written and verbal.

Operating model, business services & activities

• Maintain and enhance the documentation on the Firms operating model – business services, business activities and the systems, data, vendors and teams required to operate them.
• Work with IT, ERM, Data Governance and HR to assess the resources (groups, systems, data, vendors) required to operate each business activity.

Assessment

• Build, agree and maintain Business Impact Analyses for Groups/Teams supporting business activities – ensure these remain accurate and complete.

Planning

• Ensure that the Firms BCP accurately reflects capabilities and risk appetite.
• Work with groups supporting critical business activities to build response plans for failure of critical systems, data or vendors – includes tactical task lists for teams supporting critical business activities.
• Maintain all plans in Fusion GRC tool – integrate with tools like Everbridge and Confluence.

Testing

• Coordinate annual testing of the BCPs with all IBKR location leads, HR and Facilities 
• Coordinate with the DR team in IT to ensure scope and timing of annual DR test - include all critical business activities and systems.
• Review results to check actual recovery times meet stated RTOs and MTDs. 
• Coordinate with Data Governance and Compliance to ensure data recovery strategies (replication, backup and recovery) meet RPOs.

Integration

• Integrate the following programs:
  • Incident management – work with TOPS to embed the list of business activities into their process to categorize incidents and notify relevant managers.
  • InfoSec – work with InfoSec to embed the list of business activities into their process to categorize incidents and notify relevant managers.
  • Disaster recovery – work with the DR team in IT to ensure that DR testing is in the context of business activities and includes all systems required to operate that business activity. Ensure that recovery plans and tests have targets and results that align to the MTD for the business activity.
  • Third party service provider (TPSP) management – work with the TPSPM team in IT to ensure that vendors are mapped to business activities, critical vendors are identified, and plans are in place for loss of critical vendors.
  • Operational & IT Risk – link RCSAs and system risk assessments to understand control environment to mitigate risk of disruptions to critical business activities.
  • Infrastructure – build and maintain a link between the hardware and software inventories and work with Infrastructure to understand redundancy for critical infrastructure/hardware – build a list of single points of failure and determine cost/benefit of resolution.

Skills & Experience:

• 10+ years’ experience in business continuity or disaster recovery program at a finance, fintech or IT company.
• Deep understanding of global regulations on BCM, DR, Vendor Risk Management and OpRes, including DORA – theoretical and practical.
• Solid IT knowledge – must be able to be credible with IT management – including IT & cyber risks. 
• Demonstrated ability to execute business impact analyses, build response and recovery plans and execute tests.
• Ability to take regulation and guidelines and present practical, value adding options for implementation.
• Experience using a GRC to manage data.
• Ability to work with multiple teams in IT and business to integrate related programs for reporting purposes.
• Problem solver, practical, relentlessly driven to succeed, excellent relationship manager. 

#LI-RB1