Business Continuity and Disaster Recovery Manager

Cybersecurity: Business Continuity & Disaster Recovery (BCDR) - Senior Manager

CFGI is a leading advisory firm that partners with private equity sponsors, portfolio companies, and public companies to solve complex challenges across finance, technology, compliance, and business transformation. Our Cybersecurity practice supports clients through operational resilience, business continuity, disaster recovery, cyber resilience, and technology risk management programs.

Role Overview

CFGI is seeking a Business Continuity & Disaster Recovery (BCDR) Subject Matter Expert to lead strategic advisory engagements that strengthen clients’ operational resilience, crisis management, business continuity, and technology recovery capabilities. This role combines hands-on delivery, executive communication, and practice leadership.

The successful candidate will work with CISOs, CIOs, COOs, Risk Leaders, Infrastructure Leaders, and private equity deal teams to assess resilience maturity, develop recovery strategies, lead testing programs, and implement pragmatic solutions that improve organizational preparedness and recoverability.

Key Responsibilities

Client Advisory & Resilience Delivery

• Lead Business Continuity, Disaster Recovery, Operational Resilience, and Crisis Management engagements from scoping through executive reporting.
• Conduct Business Impact Analyses (BIA), dependency mapping, critical process assessments, and recovery objective (RTO/RPO) reviews.
• Design and implement BCM governance programs, policies, standards, recovery plans, crisis management frameworks, and multi-year resilience roadmaps.
• Assess third-party and vendor resilience capabilities and integrate continuity requirements into risk management programs.

Disaster Recovery & Technical Resilience

• Assess recovery capabilities across cloud, infrastructure, networks, applications, data platforms, and cybersecurity environments.
• Evaluate backup, replication, high availability, failover, and recovery architectures against business requirements.
• Review technical recovery documentation, runbooks, architecture diagrams, testing results, and recovery evidence.
• Assess cyber recovery capabilities, including ransomware recovery strategies, immutable backups, recovery vaults, and segregated recovery environments.
• Support M&A, carve-outs, integrations, and portfolio company resilience transformation initiatives.

Testing, Exercises & Crisis Management