IT Continuity Management Program Manager

As an IT Continuity Program Manager, you will be responsible for ensuring the uninterrupted operation of Garrett IT systems and services in the face of various disruptions such as natural disasters, cyber-attacks, equipment failures, or other emergencies. You will develop and maintain strategies, policies, and procedures to minimize downtime and data loss, while also overseeing the implementation of business continuity and disaster recovery plans. Your role will involve collaborating with various departments such as with Infrastructure service owners, Application Owners, Plant IT and non-manufacturing site IT focals etc to assess risks, identify critical systems and processes, and develop mitigation strategies to safeguard the organization's IT infrastructure

Plan and execute business & application impact analysis to identify the critical assets, periodically test disaster recovery plans and assure recoverability and resilience of critical IT applications & infrastructure.

Support TISAX certification program for critical plants / engineering R&D locations and support & coordinate for organizational level security certifications.

Key Job Areas of Responsibilities

2.1. Business Continuity Planning

Establish, implement, maintain, and continually improve IT Continuity Management System (ITCM), including the processes needed and their interactions, based on ISO 22301 and NIST 800-53, as determined by the Enterprise ITCM Governance Council. Regularly monitor, measure, analyze, and evaluate its ITCM to ensure its implementation is consistent with organization Policy, Standard, and the requirements of the ITCM. Observed nonconformities are addressed and ensure they do not recur. Conduct internal assessment and coordinate internal and external audits at planned intervals to provide information on whether the ITCM conforms to organization Policies, Standards, and other industry standards.

• Develop and maintain comprehensive business continuity and disaster recovery plans for IT systems and services.
• Identify critical IT assets, applications, and infrastructure components essential for business operations.
• Work with Busioness fnctions to identify critical process and workaround to continue busines without IT dependence during cyber Crisis (Functional Cyber BCP)
• Conduct risk assessments and business impact analyses to prioritize recovery efforts and allocate resources effectively.

2.2. Risk Management

Perform Risk Assessments covering the risks to which the critical processes, activities, applications, and infrastructure systems identified in a BIA or AIA are subject as needed or on the periodic basis defined in the Control of Documented Information Procedure. Develop strategies based on outputs from the BIA, AIA, and Risk Assessment as needed or on the periodic basis defined in the Control of Documented Information Procedure. This includes, helping business and functional team on determining proper Backup and Restore strategies of setting right threshold of RPO (Recover Point Objective) and RTO (Recovery Time Objective). Perform periodic reviews and tests of established IT Continuity Plans and procedures, reporting findings to management and making recommendations for improvements as needed. Training personnel with IT Continuity responsibilities shall focus on familiarizing them with their assigned role(s) and teaching them the skills necessary to accomplish that role(s).

2.3 Policy Development :

2.4 Plan Testing and Maintenance :

2.5 Incident Response and Crisis Management

2.6 Training and Awareness

2.7 TISAX Knowledge

2.8. Collaboration and Reporting

1. Assist site and plant IT leads in the preparation of DRP documents

2. Assist application owners in the preparation of Application Impact Analysis (AIA) & Application Recovery Plan (ARP) documents

3. Validate all sites and applications have DRP and AIA documents based on determined priority

4. Review and test the IT DR related documents annually

1. Key applications are hosted at global data centers which provide highest level of security and availability for hosted applications.

2. Applications hosted in the cloud also require steps to ensure security and availability

3. Ensure sustainability plans exist for IT DR, are well defined / documented, are executed according to plan, and meet defined standards to secure successful remediation.

Education / Qualifications

Experience

Key Skills and Knowledge

Knowledge of regulatory requirements and compliance frameworks related to IT continuity and data protection (e.g., GDPR, HIPAA, ISO 22301).