Sr. Information Security Specialist- BCM Lead

Job Title: Sr. Information Security Specialist- BCM Lead
Primary Location: 3 Days on site Hybrid in Rosemont, IL
Position Type: Direct Hire

Compensation Information
The expected salary range for this position is $100,000 - $140,000 per year, depending on experience and qualifications. This role also qualifies for comprehensive benefits such as health insurance, 401(k), and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations.

Overview
Senior Information Security Specialist (BCM Lead). This is a direct hire role that is 3 days hybrid in Rosemont, IL.

This is an exciting opportunity to be part of a robust security governance team where you'll lead and enhance a mature Business Continuity Management (BCM) program, collaborate cross-functionally, and influence enterprise-wide resilience efforts.

If you're an experienced business continuity professional with strong knowledge of FFIEC, NIST, and COBIT frameworks, and you thrive in a collaborative and structured environment, this is the role for you! This is a focus on planning, documentation, and program execution. This is not a focus on Disaster Recovery.

What You Bring to the Role. (Ideal Experience)

• Bachelor's degree or equivalent experience.
• 7+ years of Business Continuity experience in a large-scale U.S. enterprise environment experience owning or co-leading a business continuity program, strong with planning (Business Impact Analysis, resilience worksheets) and exercises (tabletop, functional). Regulatory Knowledge, ideally from financial services (preferred), insurance, or healthcare (acceptable) and highly preferred: Familiarity with FFIEC 2019 Guidance and mMust understand and work within a regulated environment (policy, audit, documentation).
• Strong expertise in BCM practices within U.S. banking enterprise organizations.
• Deep familiarity and experience in performing Information Technology and Information Security Risk Assessments.
• Experienced working with regulatory and security frameworks and guidelines including but not limited to:
  • NIST
  • FFIEC Guidelines
  • COBIT
  • Familiarity with GRC/BCM platforms helpful (e.g., Resolver, ServiceNow, BC in the Cloud).

• Leading planning, coordination, and facilitation of enterprise BCM activities.
• Assigning and managing Information Security (IS) resources to support BCM program goals.
• Advising internal stakeholders on BCM concepts and strategy, aligned to FFIEC and related standards.
• Coordinating and improving enterprise-level Business Continuity Policy.
• Supporting departments with the development and maintenance of key BCM documents:
  • Business Impact Analysis (BIA)
  • Business Continuity Plans (BCP)
  • Recovery Workflows (RW)
• Facilitating and tracking BCM testing and exercises (Tabletop, Functional, Call Tree).
• Developing and reporting on Key Risk Indicators (KRIs), enterprise-level BCM metrics, and oversight reporting (e.g., Pandemic Risk Assessment).
• Supporting automated program tools and technologies (e.g., BCS, Resolver).
• Establishing and maintaining documented procedures to ensure the effectiveness of the program.

This role requires authorization to work in the U.S. without current or future visa sponsorship.

All offers are contingent upon the completion of a background check, which may include but is not limited to reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on the end client's background check policies and applicable laws.