The posting
Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.
We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.
Summary:
About the Team
This role sits within Clio's Security and Compliance organization and owns the programs that keep Clio resilient when things go wrong: incident management and disaster recovery. It's a cross-cutting function — you'll work cross functionally with Production Engineering, Corporate Security, IT, Communications, and product teams to make sure that when an incident or disaster hits, Clio responds fast, recovers cleanly, and gets better afterward. This is a program you'll have the opportunity to improve, own and shape.
About the Role
As Manager, Continuity & Response you oversee Clio's Business Continuity program to ensure readiness and response capabilities are active, tested, and up-to-date. You will be collaborating with other leaders across the organization to improve the incident management and disaster recovery programs end-to-end: the tooling, plans, exercises, tests, metric definitions, and follow-through that turns lessons into durable improvements. You are a coordinator and a program leader — your job is to make sure the right people, playbooks, and structures are in place so that when Clio is under pressure, the response is fast, calm, and effective.
This is a Manager level role at Clio and it carries manager-level scope and accountability: you own a roadmap, you drive outcomes that show up in company results, you are the voice of resilience with senior partners, and you bring clarity to ambiguous, high-pressure situations. You'll stay hands-on — designing tabletop scenarios, configuring incident tooling, and analyzing incident data — while operating with the judgment, decision-making framework, and cross-functional influence expected of a manager.
What You'll Do
- Design and run tabletop exercises — departmental, team-specific, and scenario-specific — from writing the scenario and injects through facilitation, and capture the gaps they surface.
- Turn lessons into action — convert findings from tabletops, DR tests, and real incidents into action plans, drive them to completion with the owning teams, and hold the loop closed.
- Keep disaster recovery current — ensure DR plans, recovery tiers, RTO/RPO targets, and runbooks keep pace with Clio's evolving architecture.
- Coordinate and lead DR tests — assist in scheduling and overseeing failover and recovery exercises, documenting results, and circulate reports for review and executive approval.
- Manage the incident management tooling — administer the incident management platform: define incident types, severities, response flows, escalations, roles, and automations.
- Own the incident metrics — track and interpret incident statistics and trends (frequency, time-to-detect/resolve, effort distribution, recurrence), surface where time is being spent well or poorly, and identify redundancies and process changes that make response more effective.
- Own and defend the resilience roadmap — propose improvements, sequence the program, and educate leadership and partner teams on why it's the right thing to invest in.
- Be the connective tissue in a crisis — bring structure and clarity to live incidents and crisis-management escalations using the Incident Command structure.
- Partner on cyber resilience — work with Security, IT, and Production Engineering on recovery and resilience planning scenarios.
- Leverage AI effectively — use AI to assist and accelerate your objectives, modelling good, effective AI use for the teams you collaborate with.
- Communicate for trust — maintain the standards for internal situation reporting and external/customer communication clear, timely, and factual.
What You Bring
Required
- Hands-on experience owning incident management and/or disaster recovery programs at a technology or SaaS company.
- Trained and fluent in the Incident Command structure (or an equivalent major-incident framework), and comfortable bringing that structure to bear under pressure.
- Direct experience with Crisis Management Teams at tech companies — their workflows, practices, and how they train and test — and how a resilience program supports them.
- Demonstrated track record writing and facilitating tabletop exercises and driving the resulting action items to completion.
- Experience coordinating DR tests end-to-end: planning, execution, results reporting, and shepherding reports through approvals.
- Hands-on administration of an incident management platform (e.g. incident.io, PagerDuty, FireHydrant, Opsgenie).
- Strong grasp of DR/BC fundamentals — RTO/RPO/RTA, recovery tiers, service prioritization, backup and recovery strategy — and how they map onto a modern cloud architecture.
- Comfortable and effective with AI — you actively use it to work faster and better, and can bring others along.
- A deliberate decision-making approach and strong bias to action — you make fast, high-quality calls under uncertainty.
- Excellent written and verbal communication — able to move between an engineer, an executive, and a customer-facing team without losing the thread.
- Comfort with ambiguity and change — you can be dropped into a messy situation to bring clarity.
Preferred
- Experience partnering with SecOps/IR on cyber recovery (ransomware, clean-room/immutable backup recovery).
- Familiarity with ITIL / major incident management practices and SLA-driven prioritization.
- Experience running blameless post-incident reviews and building the metrics/reporting that track program health over time.
- Certifications such as CBCP, MBCP, ABCP, CISM, CISA, CRISC, ITIL, or PMP.
- Experience building a resilience program through toward maturity.
What Makes You a Great Fit
- You own the outcome — when a job isn't getting done, you navigate the org to the right owner.
- You bring a player-coach posture — senior enough to shape the program and defend the roadmap, hands-on enough to write the scenario, configure the tool, and read the data yourself.
- You're calm and clear under pressure, and that steadiness is something the people around you feel and borrow during a real event.
- You treat failure as a source of learning, not blame — every incident and every test makes the program sharper.
This role is a backfill for an existing position.
What you will find here:
Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.
Some highlights of our Total Rewards program include:
- Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
- Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
- Flexible time off policy, with an encouraged 20 days off per year.
- $2000 annual counseling benefit
- RRSP matching and RESP contribution
- Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
The expected salary range for this role is $120,200 to $180,200 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.
Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility
Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.
Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.
Learn more about our culture at clio.com/careers
We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.
Disclaimer: We only communicate with candidates through official @clio.com email addresses.
