Business Continuity, Incident Management & Internal Audit Manager

Overview

This role leads the organization’s resilience program and contributes to the internal audit team. Responsibilities include running the Business Continuity Management (BCM) program, owning critical incident management and crisis response, and contributing to risk-based internal audit engagements.

Responsibilities

Business Continuity Management (BCM)

• Lead the enterprise BCM program, including policy, standards, playbooks, business impact analyses (BIAs), recovery strategies, and annual plan reviews.
• Report program status, gaps, and remediation progress to line-of-business (LOB)/functional BCM program leads and senior leadership.
• Plan and run tabletop exercises and recovery tests with LOBs, Cloud Infrastructure, and InfoSec partners; use and/or develop internal AI tools to track findings to closure.
• Align BCM with Disaster Recovery and Crisis Management to ensure recovery objectives and dependencies remain consistent.

Incident Management

• Own the critical incident management process, including severity definitions, escalation paths, communications, and on-call roles.
• Coordinate response during major disruptions and lead post-incident reviews with clear root causes, owners, and due dates.
• Maintain incident metrics and trend reporting to highlight recurring risks and the status of corrective actions.
• Use and/or develop internal AI capabilities to support continuous monitoring and incident awareness notifications/communications.

Internal Audit

• Execute the risk-based internal audit plan, including operational, financial, technology, compliance, and third-party reviews.
• Plan and lead audits (scoping, risk and control matrices, TOD/TOE testing), produce workpapers, and deliver clear, evidence-based reports.
• Use and/or develop internal AI tools to support testing, reporting, and continuous monitoring where opportunities exist.
• Track management action plans, validate remediation, and report open issues to leadership.
• Maintain independence safeguards between audit work and the BCM and incident response functions the role operates.

Leadership

• Build credibility, trust, and working relationships with business partners.

Requirements

• 5 to 7 years of experience in business continuity, incident, or crisis management, including:
  • At least 2 years leading BCM programs
  • 2+ years internal audit experience
• Hands-on experience with BCM, BIAs, recovery planning, incident response, and audit methodology (risk assessment, audit planning, control testing, reporting) for FinTech, Payments, and/or Software company(ies) is required.
• Familiarity with BCM, risk management, and internal audit frameworks.
• Experience and/or strong desire to incorporate AI capabilities into processes.
• Strong writing and presentation skills; ability to brief executives clearly during pressure situations.
• Bachelor’s degree in business, accounting, information systems, or similar.

Preferred Qualifications

• CIA, CISA, CRISC, CBCP/MBCP, CISSP, or CPA.

Compensation & Benefits

Salary ranges

Salary ranges vary by geographic zone and may change based on candidate experience, expertise, and location.

• Zone 1: San Francisco Bay Area CA (includes HQ), New York City, Seattle, Los Angeles County: $131,000—$164,300 USD
• Zone 2: CA (Non San Francisco Bay Area and Los Angeles County), Austin TX, Massachusetts: $117,900—$147,900 USD
• Zone 3: Utah (includes Utah office), Dallas TX, Houston TX, Florida, North Carolina, Illinois, Colorado, Arizona, Georgia, Oregon, Pennsylvania: $111,400—$139,700 USD

Benefits package (eligible roles)

• Medical, dental, vision, life, and disability insurance
• 401(k) retirement plan
• Flexible spending & health savings account
• Paid holidays
• Paid time off
• Employee Stock Purchase Program with employee discounts
• Life Insurance, long & short-term disability coverage
• Employee Assistance Program (EAP)
• 11+ observed holidays and wellness days and flexible time off
• Wellness & Fitness initiatives
• Employee recognition and referral programs

Location

Remote-first, with office spaces in San Jose, CA and Draper, UT. Opportunities to connect in person when it counts.

Work Authorization

Visa sponsorship is not available. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.