CISO Domain Lead BC/DR

Job description

Context

As an external consultant acting as Domain Lead for Disaster Recovery (DR) for a major national railway operator and Business Continuity (BC) for a leading IT services company, you will ensure robust governance and strategic oversight of resilience capabilities. Your mission is to maintain realistic, validated DR strategies and continuity arrangements that balance technical feasibility with business priorities.

You will provide pragmatic guidance, perform cost-benefit analyses for DR options (e.g., active-active vs. cold standby, datacenter distance, replication strategies), and drive maturity improvement across DR and BC processes, frameworks, and culture.

Organization:

• Reports to:

  • CISO Office Team Lead (administrative)

  • CISO (strategic alignment)

• Direct reports: None

• Key interactions:

  • Business service owners of the railway operator

  • IT service owners of the IT services company

  • Architects, infrastructure teams

  • Risk Office, Internal Audit, crisis response teams

  • External suppliers

Missions

1. DR Strategy Governance – Railway Operator

   • Define and maintain DR strategy and standards.

   • Ensure RTO/RPO requirements are realistic and embedded in architecture.

   • Advise on multi-site recovery, failover patterns, and interdependencies.

   • Provide cost-benefit guidance for DR design decisions (e.g., datacenter distance, replication tiers).

2. BC Governance – IT Services Company

   • Maintain BC principles and templates.

   • Align BC with resilience needs and contractual obligations of the railway operator.

   • Challenge BC capabilities and identify systemic weaknesses.

3. Oversight & Reporting

   • Review DR test results and ensure actionable remediation.

   • Maintain dashboards, KRIs, and resilience heatmaps.

   • Monitor coherence of multi-site DR architecture.

4. Expert Support

   • Offer pragmatic advice for complex recovery scenarios.

   • Guide stakeholders on hybrid cloud/on-prem DR designs.

   • Ensure dependency mapping and architectural alignment.

5. Stakeholder Coaching

   • Train teams on DR/BC responsibilities and guide them to improve the overall DR Plan.

   • Produce clear documentation and best practices.

   • Promote resilience culture across both organizations.

6. Maturity Improvement

   • Assess current DR/BC maturity using recognized models (e.g., ISO 22301 maturity scale).

   • Define and implement a roadmap for continuous improvement.

   • Introduce metrics and benchmarks to track progress.

   • Recommend automation, tooling, and governance enhancements.

Scope

• DR governance & strategy for the railway operator

• BC governance & strategy for the IT services company

• DR/BC policies, standards, templates