Domain Lead

Domain Lead - Business Continuity & Disaster Recovery at Ypto. This role focuses on business continuity and IT disaster recovery for YPTO and SNCB ICT.

Responsibilities

• Ensuring the business continuity of YPTO as an organization and an SNCB ICT department in case of a calamity impacting its people (pandemic), processes or facilities.
• Ensuring the IT resilience of SNCB in case of a calamity, such as destruction of a datacenter (fire or flood), loss of electricity in a region from which SNCB contracts ICT services, ransomware attack, etc.
• Develop, test and continuously improve a comprehensive business continuity plan (BCP) that outlines strategies and procedures for ensuring that YPTO critical functions can continue in the event of a disruption.
• Perform a Business Impact Assessment to determine critical business functions and processes that need to be prioritized for continuity planning, including potential financial, operational and reputational impacts.
• Develop and maintain comprehensive business continuity plans that outline strategies and procedures for ensuring the organization\'s critical functions can continue in a disruption; the Domain Lead BC/DR is responsible for creating, updating, and testing these plans.
• Define and monitor an adequate IT disaster recovery strategy for SNCB and its subsidiaries, taking into account Business Impact Assessments and best practices in calamity risk assessment and risk modelling.
• Collaborate with other CISO Domain Leads and Enterprise Architecture to build and implement a common taxonomy.
• Develop, test and continuously improve an IT disaster recovery plan for SNCB and its subsidiaries to guide actions when a calamity occurs and ensure swift recovery.
• Develop, test and continuously improve a crisis management plan to ensure timely reaction to calamities.
• Ensure SNCB compliance with legal, regulatory and contractual requirements and industry standards related to security and business continuity, staying updated on changing regulations and adapting the BCP and security measures accordingly.
• Identify threats affecting the IT and business environment and determine countermeasures.
• Conduct an application impact analysis for business processes and develop/implement recovery strategies (business scope YPTO; IT scope SNCB).
• Consolidate and implement a comprehensive IT DR plan and create IT DR awareness and training programs under guidance of Domain Lead Awareness.
• Conduct exercises and tests; oversee testing and exercises; coordinate drills of various scopes and sizes as needed.
• Integrate business continuity with IT DR initiatives in alignment with SNCB Risk Office governance.
• Sustain an organization-wide IT DR program with governance under the CISO for SNCB and its subsidiaries.

Job Requirements

• 10 years of relevant business experience, preferably with the last 5 years in IT disaster recovery planning, combined with experience in non-IT business functions (finance, marketing, operations, etc.).
• Knowledge of DR planning and corresponding certification or proven results.
• Knowledge of risk modeling techniques, such as statistical Monte Carlo analysis and bow tie analysis.
• Master of Science degree or equivalent, preferably with a combined degree in Computer Science and business.
• BCM practitioner certification is an added value.

Competences

• Communicate, coordinate and cooperate with internal and external stakeholders across all levels.
• Influence decisions about budgets and priorities to include continuity initiatives in roadmaps.
• Apply mathematical methods to develop simple statistical models (e.g., Monte Carlo analyses).
• Strong analytical thinking and understanding of core organizational business processes.
• Identify, evaluate, and select high availability and disaster recovery solutions meeting RTO/RPO requirements.
• Select and procure appropriate recovery sites; ensure off-site data backups and SLAs with vendors and service providers.
• Lead a Disaster Recovery team and assign pre-disaster, disaster and post-disaster tasks.
• Test and manage changes to the Disaster Recovery Plan; apply maturity models for BC/DR management.
• Anticipate cybersecurity threats and lead multidisciplinary cybersecurity teams.
• Dutch or French C2, and English C1; B2 in another language is acceptable.

Our offer / Benefits

• The possibility to work remotely and flexible working hours.
• 35 days of leave.
• A company car plus a public transport season ticket.
• A target bonus and a comprehensive insurance package (including family coverage for outpatient costs).
• Hospitalisation and dental care for the whole family; outpatient costs; group insurance (pension, work disab