<div class="css-13edb3w"> <div class="css-y4nl7a"> <div class="css-kr8vd3"> <div class="css-13edb3w"> <div class="css-1czezeg"> <div class="job-posting-content"> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Attain Talent seeks a senior-level Cybersecurity Disaster Recovery and Contingency Planning (DRCP) Subject Matter Expert (SME) to lead and manage a nationwide Business Impact Analysis (BIA), Disaster Recovery Planning (DRP), and contingency planning program.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">This position provides strategic, technical, and program leadership for the development, implementation, quality assurance, and continuous improvement of BIA, DRP, Information System Contingency Planning (ISCP), and related continuity activities across applicable facilities nationwide. The successful candidate will bring deep expertise in cybersecurity, disaster recovery, business continuity, contingency planning, risk management, and federal information security requirements, along with demonstrated experience leading and managing multiple teams and geographically dispersed stakeholders.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">The ideal candidate will have extensive experience applying NIST SP 800-34, NIST SP 800-37, NIST SP 800-53, NIST IR 8286D, and NIST IR 8179 within federal or similarly regulated environments and will be comfortable translating complex cybersecurity and continuity requirements into practical, actionable program strategies.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Key Responsibilities</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Lead and manage nationwide BIA, DRP, ISCP, and contingency planning initiatives from program planning and rollout through implementation, quality assurance, approval, and final delivery.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Lead and manage multiple teams, including geographically dispersed and cross-functional teams, by establishing priorities, coordinating resources, monitoring progress, and ensuring timely completion of deliverables.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Develop and execute national implementation and rollout strategies, including standardized methodologies, templates, procedures, schedules, training, communications, milestones, and completion criteria.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Coordinate with facility leadership, business owners, system owners, IT personnel, cybersecurity teams, COOP personnel, and executive stakeholders to obtain required information and ensure successful program implementation.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Track nationwide BIA and DRP completion, identify gaps and risks, resolve issues, and provide program status reporting and escalation to senior leadership.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Lead the development, review, and maintenance of Business Process Analysis (BPA), BIA, DRP, ISCP, and related continuity documentation.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Analyze facility-level BIA results to identify critical business functions, systems, dependencies, recovery priorities, Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), Maximum Tolerable Downtime (MTD), and enterprise-wide risks.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Serve as a senior cybersecurity subject matter expert for DRCP and continuity activities, ensuring recovery strategies appropriately address cybersecurity risks, system dependencies, data protection, access controls, and critical technology requirements.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Develop and maintain cybersecurity and DRCP policies, SOPs, procedures, standards, templates, and governance documentation in accordance with applicable federal and organizational requirements.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Apply NIST SP 800-34, NIST SP 800-37, NIST SP 800-53, NIST IR 8286D, and NIST IR 8179 to contingency planning, business impact, system criticality, risk management, and recovery activities.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Plan, facilitate, and document tabletop exercises, contingency and continuity tests, disaster recovery exercises, and plan revi