Business Continuity and Risk Management Director

Position Summary
DataSpring is seeking a Business Continuity and Risk Management Director responsible for defining and advancing the enterprise strategy, governance framework, and organizational standards for business continuity and risk management. This role serves as DataSpring's recognized subject matter expert on operational resilience and partners with senior leaders across the organization to strengthen preparedness, reduce organizational risk, and ensure continuity of critical operations during disruptive events. The role blends strategic planning, risk management, and cross-functional leadership to build resilience and maintain operational stability.

The Director develops enterprise-wide approaches to business continuity, risk assessment, crisis management, and resilience planning while influencing strategic decisions that impact operational stability, client commitments, regulatory requirements, and organizational growth. This position leads through expertise, strategic influence, and organizational credibility rather than direct people management.

The Business Continuity and Risk Management Director is a full-time, remote, exempt position and reports to the VP, Business Operations.

Specific Responsibilities

Enterprise Strategy & Governance

• Define and evolve DataSpring's enterprise business continuity and risk management strategy to support organizational objectives and operational resilience.
• Establish organizational standards, governance frameworks, policies, and best practices related to continuity planning, risk management, and crisis preparedness.
• Identify emerging risks, industry trends, and evolving regulatory requirements and provide strategic leadership to ensure organizational readiness and compliance.
• Develop enterprise roadmaps and priorities that strengthen resilience capabilities and organizational readiness.

Business Continuity Leadership

• Establish and maintain the enterprise framework for Business Continuity Planning (BCP) across the organization.
• Provide strategic oversight of business continuity activities and ensure alignment with industry standards including ISO 22301 and NIST 800-34.
• Evaluate continuity capabilities across business functions and drive improvements that enhance organizational resilience.
• Guide continuity planning efforts for critical business processes, services, and operational dependencies.
• Establish and oversee continuity testing, tabletop exercises, simulations, and recovery validation activities to evaluate organizational readiness and drive continuous improvement.

Enterprise Risk Management

• Define enterprise approaches for risk identification, assessment, mitigation, monitoring, and reporting.
• Lead enterprise Business Impact Analysis (BIA) methodologies, standards, and assessments to identify critical business functions, operational dependencies, recovery priorities, and organizational risk exposure.
• Oversee risk management processes including risk registers, incident management practices, risk control self-assessments (RCSAs), and issue management frameworks.
• Assess organizational risk exposure and recommend mitigation strategies that support business objectives.

Crisis Management & Organizational Resilience

• Establish enterprise crisis management frameworks, response protocols, escalation procedures, and governance structures.
• Serve as the organization's senior advisor on continuity and resilience matters during disruptive events.
• Provide strategic guidance to leadership regarding operational impacts, recovery priorities, and organizational response actions.
• Lead post-incident reviews and drive continuous improvement initiatives that strengthen organizational preparedness.

Cross-Functional Influence & Partnership

• Partner with leaders across operations, technology, legal, compliance, finance, product development, and information security to integrate resilience and risk management into business planning and decision-making.
• Influence organizational priorities by providing expert guidance on business continuity, operational risk, and resilience considerations.
• Collaborate with technology leadership to align disaster recovery capabilities, recovery objectives, and resilience strategies.
• Build strong relationships with clients, vendors, auditors, and regulatory stakeholders on matters related to business continuity and risk management.
• Assess and influence third-party resilience capabilities, vendor dependencies, and continuity obligations that may impact critical business operations.

Organizational Capability Building

• Develop enterprise training, awareness, and preparedness programs that strengthen continuity and risk management capabilities across the organization.
• Establish metrics, performance indicators, and reporting frameworks that provide leadership visibility into organizational resilience and risk posture.
• Promote a culture of preparedness, accountability, and proactive risk management throughout DataSpring.
• Mentor leaders and cross-functional partners on continuity planning, risk assessment, and resilience best practices.

Skills

• Deep expertise in business continuity planning, operational resilience, enterprise risk management, crisis management, and disaster recovery principles.
• Strong understanding of continuity and risk management frameworks including ISO 22301, NIST, and related industry standards.
• Ability to evaluate organizational risk and develop strategic recommendations aligned with business objectives.
• Recognized subject matter expertise in business continuity and risk management.
• Exceptional communication and executive-facing presentation skills.
• Strong strategic thinking, influence, facilitation, and decision-support capabilities.
• Ability to lead through expertise and credibility across all levels of the organization.

Experience & Education

• 10+ years of experience in business continuity, risk management, operational resilience, compliance, information security, or related disciplines.
• Demonstrated experience establishing enterprise-wide continuity, resilience, or risk management frameworks.
• Proven success influencing senior leaders and driving cross-functional initiatives in complex organizations.
• Experience advising executive stakeholders on organizational risk, business continuity, and crisis management strategies.
• Bachelor's degree in Business Administration, Information Technology, Risk Management, or a related field required. Master's degree preferred.
• Certified Business Continuity Professional (CBCP), MBCI, CRISC, CISM, PMP, or other related certifications preferred.

Who We Are

DataSpring is the trusted data connector at the core of healthcare. For more than 25 years, we have powered the industry with the largest and most complete healthcare data foundation in the U.S., including more than 4.8 million provider data records sourced directly from providers and member data representing 75% of covered lives supplied by health plans. By improving how essential information flows across the system, DataSpring helps healthcare operate more efficiently, accurately, and with greater confidence.

What You Get

At DataSpring, you will do meaningful work at the intersection of healthcare, data, and technology, helping solve complex problems that make the healthcare system work better. You will collaborate with experienced professionals who care deeply about accuracy, trust, and meaningful impact in a fully remote environment.

DataSpring offers competitive compensation and a comprehensive benefits package for full-time employees, including medical, dental, and vision coverage, a 401(k) with company contributions and matching, paid parental leave, tuition assistance, and generous paid time off. We are committed to investing in our people and supporting professional growth over time.

Equal Opportunity Employer

DataSpring is proud to be an equal opportunity employer and is committed to fostering a workplace where all individuals are valued, respected, and empowered.

Employment decisions at DataSpring are made without regard to race, color, religion, sex, national origin or ancestry, age, marital status, disability, protected veteran status, personal appearance, sexual orientation, gender identity or expression, familial status, family responsibilities, matriculation, political affiliation, genetic information, source of income, place of residence, or any other characteristic protected by law. DataSpring does not tolerate unlawful discrimination or harassment of any kind.

Applicants have rights under the Family and Medical Leave Act (FMLA), Equal Employment Opportunity (EEO), and the Employee Polygraph Protection Act (EPPA). If you need a reasonable accommodation to apply for a posted position, please contact the DataSpring People & Culture team at Careers@dataspring.org or 202-517-0436.