Business Continuity & Resilience Risk Lead - Chief Risk Office

Details

Bloomberg is seeking a seasoned professional to join its second line of defense (2LoD) Risk function, providing independent oversight, challenge, and governance of the firm's Resilience program, encompassing Business Continuity (BC), Disaster Recovery (DR), and Operational Resilience.

The ideal candidate is a technically grounded practitioner who can credibly engage with engineers, infrastructure teams, and product teams—not just assess documentation—and translate technical recovery capabilities into meaningful risk judgments. This leader will work closely with executives, including the Company's central Business Continuity Management (BCM) lead, Engineering leaders overseeing the Company's DR program, and the Operational Resilience leadership team.

The role requires a genuine risk-based mindset: prioritizing effort, scrutiny, and escalation in proportion to actual risk exposure. The successful candidate will be thoughtful and deliberate when forming views, practical when communicating and embedding findings, and pragmatic when distinguishing material issues from noise.

Responsibilities

• Provide independent oversight and challenge of Bloomberg's Business Continuity, Disaster Recovery, and broader resilience programs operated by the first line of defense.
• Assess, oversee, and challenge frameworks and strategies for Business Continuity, Disaster Recovery, and Operational Resilience.
• Assess the technical adequacy of the firm's recovery posture, including disaster recovery architecture, failover mechanisms, data replication strategies, backup integrity, and system recovery tiering.
• Evaluate alignment between business continuity plans, disaster recovery capabilities, and impact tolerance thresholds to ensure end-to-end recoverability of critical services under realistic failure scenarios.
• Identify gaps, weaknesses, and emerging risks across the resilience framework and escalate findings with clear, evidence-based remediation recommendations.
• Own and maintain the 2LoD resilience policy and standards suite, ensuring alignment with industry best practices and Bloomberg's technology-intensive operating environment.
• Drive periodic framework reviews and updates in response to technology change, infrastructure evolution, and lessons learned from incidents and exercises.
• Oversee 2LoD reviews of resilience testing programs, including business continuity exercises, disaster recovery failover tests, tabletop simulations, and scenario-based resilience stress tests.
• Ensure testing scenarios are technically realistic and cover cyber incidents, including ransomware and destructive attacks, infrastructure failures, data corruption events, third-party outages, and geographic disruptions.
• Verify that lessons learned from tests and live incidents result in tangible improvements to resilience capabilities.
• Evaluate third-party and vendor disaster recovery capabilities supporting critical Bloomberg services, with particular attention to concentration risk and recovery interdependencies.
• Report on the firm's recovery posture against defined impact tolerances and flag capability gaps that could prevent the firm from remaining within tolerance during a severe but plausible disruption.
• Contribute to operational risk appetite frameworks relating to resilience and recoverability risks.
• Build trusted relationships with first-line resilience teams, Technology Infrastructure, Site Reliability Engineering, Cyber/Information Security, Third-Party Risk, and business leadership.
• Serve as a technically credible challenge partner to Engineering and Product teams on resilience architecture decisions, engaging substantively on design trade-offs rather than only governance processes.
• Promote a culture in which resilience is understood as an interconnected, technically grounded discipline rather than a siloed compliance activity.

Requirements

• 10+ years of experience spanning Business Continuity, Disaster Recovery, and enterprise resilience, with deep hands-on technical grounding in at least one associated discipline.
• Strong command of disaster recovery concepts, including RTO/RPO design and validation, recovery tiering, active/passive and active/active failover architectures, data replication technologies, backup and restoration methodologies, and dependency mapping.
• Experience assessing or governing disaster recovery capabilities in complex, technology-intensive environments, including on-premises data centers, hybrid infrastructure, and cloud-native or multi-cloud architectures.
• Proven second-line-of-defense experience with the ability to provide credible independent oversight and challenge, including the technical depth to assess actual capability beyond policy review.
• Experience engaging constructively with engineering, SRE, and infrastructure teams.
• Strong analytical and communication skills, with the ability to translate highly technical findings into risk-based narratives for senior and Board-level audiences.

Preferred Qualifications

• Professional certifications such as CBCP, MBCI, CRISC, AWS, Azure, or GCP certifications, or equivalent technical credentials in infrastructure, cloud, or IT risk.
• Experience assessing cyber-informed disaster recovery strategies, including ransomware recovery planning, immutable backup architectures, and clean-room recovery environments.
• Exposure to financial market infrastructure, data platforms, or real-time systems where recovery time requirements are exceptionally tight and data integrity is paramount.
• Experience evaluating third-party and vendor disaster recovery capabilities, including due diligence on critical technology suppliers.

Compensation and Benefits

• Salary range: $185,000–$245,000 USD annually, plus benefits and bonus.
• Actual compensation may vary based on geographic location, work experience, market conditions, education, training, and skill level.
• Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) match, life insurance, and wellness programs.