The posting
| What we are looking for Reporting to the Manager, Business Continuity and Resiliency, the Senior Specialist leads, supports and provides subject-matter expertise for the day-to-day operations and the strategic maturation of the Business Continuity Management (BCM) Program. This role is responsible for supporting the management and oversight of the BCM Policy, Crisis Management Plan (CMP), Business Continuity Plans (BCP) and operational response tools, ensuring they are supported by effective operational processes. This role supports the organization's preparedness to effectively respond to operational interruptions, process failures, and unpredictable events with potential reputational, legal, or strategic implications, aligning with regulatory expectations and industry best practices. Duties and Responsibilities Crisis Management Program
Support the design, development, implementation, and ongoing continuous improvements of the crisis management program to fulfill the crisis readiness strategy aligned with best practices.
Lead the design, development, execution, and continuous improvement of team and role-based training for the EMT, CMT and those with a role in response and recovery to support the operational effectiveness of the organization’s crisis readiness posture. Coordinate and support the evaluation of the program’s maturity and development of prioritized plans, leading components of continuous improvement activities. Support the design, development, execution, reporting, and continuous improvement of the crisis management exercise, which includes internal and external stakeholders. Provide support in the event of a crisis requiring response team and/or response plan invocation, including facilitating organizational response via managing the EMT, liaising with the CMT, conducting post-incident reviews, and developing after-action reports and monitoring associated actions.
Business Continuity Management Program
Support the management of the BCM Program, including maintenance of the Policy and supporting documentation, that enable Payments Canada to effectively respond to a business disruption and mitigate the inherent business continuity risk. Coordinate and provide subject matter expertise in the design, development, implementation, organizational change management and continuous improvement of Payments Canada’s BCM technologies and tooling (e.g., GRC tooling, AI-enhanced workflows, scenario library, etc.).
Coordinate and support the design, development, execution and reporting of the Business Impact Analysis (BIA) to identify and analyze the potential impact of a disruption to business operations, including improvements to the overall process, technology dependency mapping architecture/asset management, and recovery objectives. Coordinate and support the development of mitigation and continuity strategies across the organization. Lead the updates of BCPs for payment systems and corporate IT business functions, including the development of new BCPs as required. Coordinate and support the annual review of tactical response strategies and procedures owned by cross-functional stakeholders, driving the maturation of response capabilities, documentation, and overall threat alignment.
Support the design, development and implementation of the organization’s IT Disaster Recovery Program, including the development of the Disaster Recovery Plan (DRP). Support the refinement of current Business Continuity and Disaster Recovery tooling and the underlying data foundation across both corporate and payment environments. Support, develop and oversee business continuity-related tests and exercises to ensure adherence to the BCM Policy, validating the effectiveness of response-related documentation, evaluating and continually improving response and recovery capabilities, and reporting on outcomes and lessons learned. Support operational-level response to disruptions leveraging BCPs, processes and procedures. Support the BCM program change management and tracking. Support the design, development, execution and continuous improvement of the BCM awareness, education and training program for the organization.
Integrated Risk Management Oversight, Challenge, and Risk Reporting
Provide oversight and effective challenge to cross-functional stakeholders on business continuity-related risks associated with initiatives, projects, change activities and operations to support effective risk management in alignment with established practices and risk appetite. Identify gaps in continuity capability versus requirements and recommend solutions, including opportunities for training, as appropriate. Monitor risks to operational resiliency (via Hazard Identification, Risk Assessment, Disaster Recovery test results, etc.), ensuring business continuity requirements are achieved and the enterprise can effectively mitigate them. Formulate recommendations to risk leadership and business stakeholders on business continuity and resiliency issues through briefings, reports, and presentations. Identify relevance and implications for Payments Canada.
Relationship & Stakeholder Management
Develop and maintain effective relationships with key stakeholders and subject matter experts across the organization, as well as externally with members, partners, third parties and interested parties. Communicate and collaborate with risk management and thought leaders within and outside the Payments Canada membership to gather and provide information, advice and solutions and remain abreast of the latest developments in operational resiliency and related domains. Represent Payments Canada in operational resiliency-related forums, external committees, and cross-sector tests and exercises. Maintain awareness of global and financial industry-related operational resiliency, crisis management, and BCM initiatives and developments.
| What you need to be successful
College or university certificate/diploma/degree in Computer Science, Business, Information Systems/Technology, Cyber Security or related fields; Minimum of five (5) recent experience in business continuity, crisis management, disaster recovery and/or operational risk management; Certification in Business Continuity Management from a recognized institutional body (i.e., Disaster Recovery Institute, Business Continuity Institute, etc.); Certification in operational resilience, risk management, cybersecurity and information technology domains considered an asset; Experience using business continuity management software solutions (e.g., ServiceNow, Ardoq); Experience implementing business continuity management software solutions considered an asset; Knowledge of business continuity, crisis management, operational and cyber risk management standards (e.g., ISO22301, ISO 22361, ISO 27031, ISO 31000, ISO 27000, NIST Framework, etc.); Strong knowledge of some information security domains, which may include GRC (risk assessment governance, processes and technologies), asset security, identity and access management, security architecture/engineering, communication and network security, security assessment and testing, security operations, and/or software development security; Knowledge of AI/ML concepts including machine learning algorithms/models, AI governance and AI regulatory landscapes; Excellent relationship management, stakeholder management, presentation and communication skills; Strong project management skills, with the ability to coordinate with cross-functional stakeholders; The role includes on-call duties, requiring primary and secondary availability outside standard working hours by being on standby on a regular basis to provide timely support to the Emergency Management Commander specific to operational disruptions (e.g. emergency changes, escalated disruptions, etc.) or crisis events requiring the invocation of the CMP, BCP, etc.; and Eligibility to successfully complete background checks that will be carried out by Payments Canada, including criminal, credit, identity, employment, and education checks.
| Salary range Our target starting rate for this role is $100,300 with flexibility based on your experience and qualifications. The full salary range and benefits package are detailed below. Please submit your application by November 27, 2026.
