Assistant Vice President - Disaster Recovery - CISSP/CISM

Role AVP, Disaster Recovery

Reporting to SVP, Information Security

Function Information Security

Location New Delhi

Key Attributes & Skills:

- BE/B.Tech in IT with 10- 14 years of experience in IT organization with at least 4 years of experience in Disaster Recovery role

- Certifications - Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)

- At least 2-3 years of experience in DR Management including creation and maintenance of DR plans, manage DR compliance testing, manage the risk register of DR issues

- Knowledge of aspects of physical security and facility management in the DC/DR facility of an organization

Role Description:-

1. To develop and execute procedures to ensure that ORGANIZATIONS can respond to a disaster so that the critical business functions can be resumed within a defined time frame, the amount of loss can be minimized, and any stricken facilities can be repaired or replaced as quickly as possible.

2. The role holder would also be responsible for designing, development, maintenance, and exercising (testing) of the overall disaster recovery plans for each critical functional area of the organization

Key Responsibilities:-

Strategy Design and Implementation

- Perform risk analysis for functional areas to identify points of vulnerability and provide inputs in the formulation of disaster avoidance and reduction strategies and overall department strategy

- Conduct business impact analysis and determine critical business processes, identify acceptable recovery time periods, and establish resources required for the successful resumption of business operations in the event of a disaster

- Analyze the costs related to minimizing the potential exposures to disaster through disaster recovery plan; Provide inputs to the department's budgeting exercise and ensure adherence to the same

Disaster Recovery Operations

- Prepare recovery point objective (RPO), the maximum tolerable period in which data might be lost from an IT service due to a major incident (the RPO would give systems designers a limit to work to)

- Prepare recovery time objective (RTO) which is the duration of time and a service level within which processes must be restored after a disaster (or disruption) in order to avoid unacceptable consequences associated with a break in business continuity

- Coordinate with respective security role holders in Technology to ensure that an inventory of hardware (e.g. servers, desktops, laptops and wireless devices), software applications and data and that all critical information is stored in a back up

- Provide relevant inputs to the Technology team with respect to selection of vendors that adhere to service level agreements that meet disaster recovery planning requirements

- Work with vendors of disaster recovery services and facilities; study and recommend outside services for use during a disaster situation

- Maintain contact with outside contingency planning professional organizations and local/regional emergency response groups to understand the latest disaster recovery methods and technologies and implement relevant ones within ORGANIZATION- S

- Collaborate with other functions in the development of procedures for the continuity of business processes in a disaster situation

Documentation and Training

- Prepare instructional and informational materials, including all compliance procedures, on how staff are expected to respond during an emergency

- Develop and maintain standards and procedures for disaster recovery documentation

- Conduct disaster recovery training for staff members in all functional areas to ensure compliance to disaster recovery procedures at individual and functional level

Testing

- Establish disaster recovery testing methodologies; plan and coordinate the testing of recovery support procedures in different functional areas

- Carry out disaster recovery audits for disaster preparedness of ORGANIZATION- S from an external agency

People Development

- Take an active role in recruitment of incumbents into own team

- Conduct formal performance appraisal and provide developmental feedback for own team

- Identify training needs of subordinates and provide functional training inputs through internal and external sources

Others

- Ensure timely preparation of MIS and Status Updates for circulation to the Top Management and other authorities as may be required.