Business Continuity & Disaster Recovery Analyst

InvoiceCloud is a fast-growing fintech leader recognized with 20 major awards in 2025, including USA TODAY and Boston Globe Top Workplaces, multiple SaaS Awards wins for Best Solution for Finance and FinTech, and national customer service honors from Stevie and the Business Intelligence Group. Judges also highlighted our mission to reduce digital exclusion and restore simplicity and dignity to how people pay for essential services, as well as our leadership in AI maturity and responsible innovation. It’s an award-winning, purpose-driven environment where top talent thrives. To learn more, visit InvoiceCloud.com. 

Job Details:

We are seeking a highly organized and detail-oriented Business Continuity & Disaster Recovery (BC/DR) Analyst to support the Operational Resilience Program. This role is responsible for strengthening InvoiceCloud’s ability to sustain critical operations and recover quickly from disruptive events that may impact customers, technology platforms, or business processes.

As a subject matter contributor in continuity and recovery planning, this individual partners with business leaders, Engineering, Infrastructure/Cloud Operations, Security, and Product teams to conduct business impact analyses, define recovery objectives, develop and test playbooks, and drive measurable improvements in resilience readiness.

This is a highly cross-functional role requiring structured thinking, disciplined execution, and the ability to translate regulatory and framework guidance (ISO 22301, NIST SP 800-34) into practical, operational controls. Success in this role means reducing resiliency gaps, validating recovery capabilities through testing, and ensuring BC/DR artifacts are audit-ready, actionable, and aligned to business priorities.

Success Profile:

This role is anchored in our company’s core competencies. These competencies reflect the mindsets and behaviors that define success in this role. We outline how each competency translates into real-world actions and outcomes specific to this role.

 

Results Driven

• Leads Business Impact Analysis (BIA) & Resilience Planning by identifying critical processes, services, dependencies, and acceptable downtime thresholds, ensuring continuity priorities align to customer impact and business risk.
• Defines and validates Recovery Objectives & Strategy (RTO/RPO) for critical services, confirming backup, replication, and resiliency controls meet required recovery targets and coordinating remediation where gaps exist.
• Executes structured Testing, Exercises, and Continuous Improvement initiatives—including tabletop simulations, functional exercises, and technical recovery tests—producing after-action reports and measurable readiness improvements.
• Delivers documented 30-, 150-, and 210-day outcomes such as refreshed BIAs, validated recovery objectives, executed enterprise exercises, closed corrective actions, and leadership-ready readiness metrics.

Takes Ownership

• Develops and maintains BC/DR Plans and Playbooks that are role-based, actionable, version-controlled, and aligned to enterprise incident-management processes.
• Establishes governance rhythms for BIA maintenance, plan reviews, annual testing calendars, corrective-action tracking, and leadership reporting to ensure sustained program maturity.
• Partners through Operational Integration with Cloud/Data Center Operations, Engineering, and Change Management teams to embed BC/DR requirements into architecture decisions, operational runbooks, and resilience design standards.
• Communicates program status, resilience risks, and recovery-readiness insights to Security leadership, ELT stakeholders, and the CISO, ensuring transparency and accountability across the organization.

Drives Efficiency

• Standardizes documentation templates, dependency inventories, RTO/RPO tiering models, and reporting formats to improve consistency, audit readiness, and stakeholder clarity.
• Implements structured corrective-action tracking with defined owners, evidence requirements, and measurable closure timelines to reduce resiliency gaps systematically.
• Streamlines enterprise Testing, Exercises, and Continuous Improvement workflows to ensure learnings from incidents and simulations translate into actionable improvements.
• Brings order to complex cross-functional recovery planning by aligning business-unit expectations, technical recovery capabilities, and regulatory guidance into practical, sustainable processes.

Innovative

• Applies structured analysis and scenario modeling to identify disruption patterns, hidden dependencies, and resilience blind spots that may not be visible through standard documentation reviews.
• Leverages AI and automation tools to enhance plan governance, corrective-action tracking, dependency mapping, and reporting workflows—improving efficiency, scalability, and real-time visibility into recovery readiness metrics.
• Continuously evaluates evolving resilience standards, regulatory expectations, and industry best practices, translating them into adaptive controls that strengthen InvoiceCloud’s operational resilience posture.

 

Requirements

• Bachelor’s degree in Information Security, Risk Management, Business Analytics, or a related field (or equivalent experience).
• 3–5 years of experience in business continuity, disaster recovery, operational resilience, or operations-risk functions.
• Hands-on experience conducting Business Impact Analyses (BIAs) and defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
• Working knowledge of ISO 22301, NIST SP 800-34, or similar continuity and disaster-recovery frameworks.
• Experience developing and maintaining continuity and disaster-recovery plans, playbooks, and runbooks.
• Experience coordinating tabletop exercises, functional recovery tests, or technical failover simulations.
• Familiarity with cloud and infrastructure environments, including high availability, backups, replication, and recovery strategies.
• Strong documentation, organization, and cross-functional coordination skills.
• Ability to communicate resilience risks and recovery readiness clearly to both technical and business stakeholders.
• CBCP, ISO 22301 Implementer, CISM, CISA, or related certifications preferred.