[Hiring] Business Continuity, Incident Management & Internal Audit Manager @BILL

Role Description

BILL is seeking a Manager to lead the company's resilience program and contribute to the internal audit team. You will run the Business Continuity Management (BCM) program; own critical incident management and crisis response; and provide meaningful contributions to risk-based internal audit engagements.

What you will do

• Business continuity
  • Lead the enterprise BCM program: policy, standards, playbooks, business impact analyses (BIAs), recovery strategies and annual plan reviews.
  • Report program status, gaps and remediation progress to the LOB/functional BCM program leads and senior leadership.
  • Plan and run tabletop exercises and recovery tests with LOBs, Cloud Infrastructure and InfoSec partners; use/develop internal AI tools to track findings to closure.
  • Align BCM with Disaster Recovery and Crisis Management so recovery objectives and dependencies stay consistent.
• Incident management
  • Own the critical incident management process: severity definitions, escalation paths, communications and on-call roles.
  • Coordinate response during major disruptions and lead post-incident reviews with clear root causes, owners and due dates.
  • Maintain incident metrics and trend reporting to show recurring risks and the status of corrective actions.
  • Use/develop internal AI capabilities to create continuous monitoring and incident awareness notifications/communication.
• Internal audit
  • Execute the risk-based internal audit plan, including operational, financial, technology, compliance and third-party reviews.
  • Plan and lead audits: scoping, risk and control matrices, TOD/TOE testing, produce workpapers, and clear, evidence-based reports. Use internal AI tools to execute testing and produce reporting as well as continuous monitoring when opportunities exist.
  • Track management action plans, validate remediation, and report open issues to leadership.
  • Keep independence safeguards in place between audit work and the BCM and incident response functions you operate.
• Leadership
  • Build credibility, trust and working relationships with our business partners.

Qualifications

• 5 to 7 years in business continuity, incident or crisis management with at least 2 years leading BCM programs; 2+ years internal audit experience.
• Hands-on experience with BCM, BIAs, recovery planning, incident response and audit methodology (risk assessment, audit planning, control testing, reporting) for FinTech, Payments and/or Software company(ies) is a non-negotiable.
• Familiarity with BCM, risk management and internal audit frameworks.
• Experience and/or strong desire to incorporate AI capabilities into your processes.
• Strong writing and presentation skills; able to brief executives clearly during pressure situations. Capable of providing credible challenge at all levels of the organization.
• Bachelor's degree in business, accounting, information systems or similar.
• Preferred: CIA, CISA, CRISC, CBCP/MBCP, CISSP or CPA.

Requirements

• Visa Sponsorship: This position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.

Benefits

• 100% paid employee health, dental, and vision plans (choose HMO, PPO, or HDHP).
• HSA & FSA accounts.
• Life Insurance, Long & Short-term disability coverage.
• Employee Assistance Program (EAP).
• 11+ Observed holidays and wellness days and flexible time off.
• Employee Stock Purchase Program with employee discounts.
• Wellness & Fitness initiatives.
• Employee recognition and referral programs.
• And much more.