IT Resilience Program Manager

IT Resilience Program Manager

The Office of Information Technology's Information Security team is seeking an experienced IT Resilience Program Manager to build and lead the University's IT business continuity and disaster recovery program.

This information assurance role will improve the availability and integrity of the University's critical IT services. It will establish enterprise standards, improve recovery capabilities, validate readiness, and advise leaders on resilience risks and investment priorities.

The successful candidate will be a program builder who can turn broad goals into practical, sustainable capabilities. They will lead through influence in a matrixed environment and balance resilience, business priorities, technical constraints, and available resources.

Responsibilities

Build and Lead the IT Resilience Program

• Design, implement, and continuously improve the University's IT business continuity and disaster recovery program.
• Establish standards, governance, methodologies, playbooks, templates, and operating practices.
• Define minimum resilience requirements based on service criticality, recovery objectives, regulatory expectations, and institutional risk.
• Maintain a consistent lifecycle for recovery plans, testing, remediation, and reporting.

Strengthen Recovery Capabilities

• Lead service owners to define business impact, recovery time and recovery point objectives, dependencies, and recovery strategies.
• Evaluate recovery capabilities across applications, infrastructure, identity, networks, endpoints, backups, cloud services, SaaS platforms, and third-party providers.
• Identify material gaps and develop practical, risk-informed recommendations.
• Integrate resilience processes into architecture, technology lifecycle, solution advisory, and third-party risk processes.

Validate Readiness

• Design and lead tabletop, functional, technical, and scenario-based exercises with leaders and technical teams
• Evaluate recovery capabilities across applications, infrastructure, identity, networks, endpoints, data protection, backup and restoration, monitoring, cloud platforms, SaaS services, and vendor-managed environments.
• Document findings, assign accountable owners, and track remediation through closure.
• Coordinate with incident response, crisis management, emergency management, and business continuity partners during significant disruptions.

Advise, Influence, and Improve

• Advise IT and business leaders on recovery limitations, institutional risk, remediation priorities, investment needs, and risk acceptance decisions.
• Shape risk-informed resilience practices across central and distributed IT, and integrate material risks, metrics, audit, compliance, and regulatory requirements into the broader IT risk program.
• Build the reporting, guidance, and enablement needed to improve readiness, accountability, and sustained adoption across technical teams, service owners, and leaders.

Qualifications

Required Qualifications

• Bachelor's degree in information technology, computer science, engineering, or a related field, OR equivalent professional experience.
• Five or more years of relevant experience in IT resilience, disaster recovery, business continuity, cybersecurity, technology risk, or a related field.
• Demonstrated experience building or materially improving a resilience or recovery program.
• Experience defining recovery objectives, dependencies, recovery strategies, and technical requirements.
• Experience evaluating recovery capabilities across infrastructure, applications, cloud platforms, SaaS services, and third-party providers.
• Experience designing and facilitating cross-functional exercises.
• Strong analytical, program leadership, facilitation, and communication skills.
• Ability to influence technical and business stakeholders without direct authority.
• Ability to translate technical failure scenarios into business impact and actionable priorities.
• Ability to work in the United States, now or in the future, without visa sponsorship

Preferred Qualifications

• Experience in higher education or another complex, decentralized organization.
• Experience with ransomware recovery, identity recovery, backup validation, cloud resilience, or cyber-recovery exercises.
• Familiarity with NIST SP 800-34, the NIST Cybersecurity Framework, ISO 22301, ISO 27031, or comparable frameworks.
• Experience with resilience or risk platforms such as Fusion, Archer, or ServiceNow.
• Relevant certifications such as CBCP, MBCP, CRISC, CISM, CISSP, ITIL, or cloud architecture credentials.

Additional Information

• Deadline to apply (subject to change): Tuesday, July 28th, 2026
• Salary: up to $110,000, commensurate with experience
• Work Location: Hybrid, on campus three days per week

The University of Notre Dame seeks to attract, develop, and retain the highest quality faculty, staff and administration. The University is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, national or ethnic origin, sex, disability, veteran status, genetic information, or age in employment. Moreover, Notre Dame prohibits discrimination against veterans or disabled qualified individuals, and complies with 41 CFR 60-741.5(a) and 41 CFR 60-300.5(a). We strongly encourage applications from candidates attracted to a university with a Catholic identity.