Senior Manager, Business Continuity Management & Testing in Toronto

What's the Opportunity? The Senior Manager, Business Continuity Management & Testing is a strategic leader driving operational resilience across Technology & Operations Canada. You will lead the design, execution, and validation of comprehensive Business Continuity testing programs including tabletop exercises, scenario-based simulations, and live drills. You will manage a portfolio of Business Impact Analyses (BIAs) and Business Continuity Plans (BCPs) to ensure organizational alignment with Enterprise Business Continuity Risk Management (BCRM) standards and regulatory requirements (OSFI E-21). This role integrates testing expertise with incident management to proactively identify vulnerabilities, execute swift recovery strategies, validate organizational preparedness, and deliver actionable insights to senior leadership - making a lasting impact through effective BCM incident response, continuous improvement, and operational resilience.

What will you do?

• Business Continuity Portfolio Management & Analysis
  • Lead Business Impact Analysis (BIA) activities; assess critical business functions, dependencies, and define Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) aligned with enterprise risk tolerance.
  • Develop, review, and maintain a strategic portfolio of BCP artifacts to ensure currency, relevance, and compliance with OSFI E-21 and BCRM standards.
  • Conduct comprehensive threat and risk assessments; evaluate potential threats (cyberattacks, natural disasters, operational failures) and recommend appropriate risk mitigation strategies.
  • Maintain accountability for assigned BCP artifacts and ensure regular updates reflecting organizational, technological, and business changes.
• BCP Testing, Scenario Planning & Validation
  • Design and lead comprehensive BCP testing programs including tabletop exercises, scenario-based simulations, live drills, and focused recovery exercises tailored to organizational learning objectives.
  • Develop detailed test plans, testing protocols, and scenario frameworks that validate BCP effectiveness and organizational readiness.
  • Facilitate scenario development workshops with business and technology stakeholders to ensure realistic, relevant testing exercises.
  • Coordinate testing logistics, participant communications, and exercise execution; ensure all participants understand roles, responsibilities, and exercise objectives.
  • Analyze testing results, capture lessons learned, and develop actionable recommendations to strengthen BCPs and organizational capabilities.
  • Track and report on testing metrics, including exercise frequency, participant feedback, identified gaps, and remediation status.
• Incident Management & Crisis Response
  • Lead the Incident Management Team (IMT) for incidents of local, regional, or geographic significance; assess severity, determine escalation protocols, and coordinate response efforts across cross-functional teams.
  • Apply BCP testing insights and validated recovery strategies to lead real incident response and recovery efforts; manage communications, coordinate recovery actions, and track incident resolution.
  • Declare incident status, prioritize recovery and resolution efforts based on business impact, manage escalation procedures, and declare 'Business as Usual' upon resolution.
  • Lead incident communications to internal and external stakeholders; coordinate with senior leadership and regulatory bodies during crisis situations.
• Continuous Improvement & Governance
  • Complete comprehensive Post-Incident Review (PIR) documentation including root cause analysis, facilitate stakeholder review, and document lessons learned for integration into BCPs and testing programs.
  • Maintain comprehensive incident management and testing documentation including playbooks, team memberships, incident guides, testing plans, and exercise reports aligned with EBCRM standards and regulatory requirements.
  • Proactively identify and drive continuous improvement opportunities across incident management and BCP testing processes; identify efficiency improvements.