Business Continuity and Risk Management Director

CAQH Position Summary DataSpring is seeking a Business Continuity and Risk Management Director responsible for defining and advancing the enterprise strategy, governance framework, and organizational standards for business continuity and risk management. This role serves as DataSpring's recognized subject matter expert on operational resilience and partners with senior leaders across the organization to strengthen preparedness, reduce organizational risk, and ensure continuity of critical operations during disruptive events.

The role blends strategic planning, risk management, and cross-functional leadership to build resilience and maintain operational stability. The Director develops enterprise-wide approaches to business continuity, risk assessment, crisis management, and resilience planning while influencing strategic decisions that impact operational stability, client commitments, regulatory requirements, and organizational growth.

This position leads through expertise, strategic influence, and organizational credibility rather than direct people management. The Business Continuity and Risk Management Director is a full-time, remote, exempt position and reports to the VP, Business Operations. Specific Responsibilities Enterprise Strategy & Governance Define and evolve DataSpring's enterprise business continuity and risk management strategy to support organizational objectives and operational resilience.

Establish organizational standards, governance frameworks, policies, and best practices related to continuity planning, risk management, and crisis preparedness. Identify emerging risks, industry trends, and evolving regulatory requirements and provide strategic leadership to ensure organizational readiness and compliance. Develop enterprise roadmaps and priorities that strengthen resilience capabilities and organizational readiness.

Business Continuity Leadership Establish and maintain the enterprise framework for Business Continuity Planning (BCP) across the organization. Provide strategic oversight of business continuity activities and ensure alignment with industry standards including ISO 22301 and NIST 800-34. Evaluate continuity capabilities across business functions and drive improvements that enhance organizational resilience.

Guide continuity planning efforts for critical business processes, services, and operational dependencies. Establish and oversee continuity testing, tabletop exercises, simulations, and recovery validation activities to evaluate organizational readiness and drive continuous improvement. Enterprise Risk Management Define enterprise approaches for risk identification, assessment, mitigation, monitoring, and reporting.

Lead enterprise Business Impact Analysis (BIA) methodologies, standards, and assessments to identify critical business functions, operational dependencies, recovery priorities, and organizational risk exposure. Oversee risk management processes including risk registers, incident management practices, risk control self-assessments (RCSAs), and issue management frameworks. Assess organizational risk exposure and recommend mitigation strategies that support business objectives.

Crisis Management & Organizational Resilience Establish enterprise crisis management frameworks, response protocols, escalation procedures, and governance structures. Serve as the organization's senior advisor on continuity and resilience matters during disruptive events. Provide strategic guidance to leadership regarding operational impacts, recovery priorities, and organizational response actions.

Lead post-incident reviews and drive continuous improvement initiatives that strengthen organizational preparedness. Cross-Functional Influence & Partnership Partner with leaders across operations, technology, legal, compliance, finance, product development, and information security to integrate resilience and risk management into business planning and decision-making. Influence organizational priorities by providi