CRO - Business Continuity & Resilience Risk Lead

• CRO - Business Continuity & Resilience Risk Lead
• Bloomberg is seeking a seasoned
• professional
• to join its second line of defense (2LoD) Risk function, providing independent oversight, challenge, and governance of the firm's Resilience program — encompassing Business

Continuity

(

BC

), Disaster Recovery (DR), and

Operational Resilience

.

The ideal candidate is a technically grounded practitioner who can credibly engage with engineers, infrastructure teams, and

product teams

— not just assess documentation — and translate technical recovery capabilities into meaningful risk judgments. They bring the seniority to influence senior stakeholders and the hands-on depth to ask the right questions when it matters most.

This leader will be expected to work closely with

key executives, including

the

Company’s

central

Business Continuity Management (BCM)

lead

, ENG

• leaders
• overseeing the Company’s DR program,

and

• the Company’s Operational Resilience leadership team,
• among
• others

,

as a key risk adviser.

Critically, this is someone who

operates

with a genuine risk-based mindset —

prioritizing

effort, scrutiny, and escalation in proportion to actual risk exposure rather than applying uniform oversight for its own sake. They are thoughtful and deliberate in how they form views, practical in how they communicate and embed findings, and pragmatic enough to distinguish between issues that matter and noise that

doesn't

.

Key Responsibilities

• Provide robust independent oversight and
• challenge

of Bloomberg's

BC

,

/

• DR and broader
• resilience program
• s
• and practices
• operated
• by the first line of defense.
• This will include
• , for example,
• assessment, oversight, and
• challenge
• of the adopted
• frameworks and
• strategies

for BC, DR, and

OpRes

.

Assess the technical adequacy of the firm's recovery posture —

including disaster recovery architecture, failover mechanisms, data replication strategies, backup integrity, and system recovery tiering — not just the documentation surrounding them.

Evaluate alignment between business continuity plans, disaster recovery capabilities, and impact tolerance thresholds to ensure end-to-end recoverability of critical services under realistic failure scenarios.

Identify

gaps, weaknesses, and emerging risks across the resilience framework and escalate findings with clear, evidence-based remediation recommendations.

Own and

maintain

the 2LoD resilience policy and standards suite, ensuring they reflect both industry best practice and Bloomberg's complex, technology-intensive operating environment.

Drive periodic reviews and updates to frameworks in response to technology change, infrastructure evolution, and lessons learned from incidents and exercises.

Oversee the 2LoD review of resilience testing programs, including business continuity exercises, disaster recovery failover tests, tabletop simulations, and scenario-based resilience stress tests.

Ensure testing scenarios are technically realistic, covering cyber incidents (including ransomware and destructive attacks), infrastructure failures, data corruption events, third-party outages, and geographic disruptions.

Verify that lessons learned from tests and live incidents result in tangible improvements to resilience capabilities.

Evaluate third-party and vendor disaster recovery capabilities where they underpin critical Bloomberg services, with particular attention to concentration risk and recovery interdependencies.

Report on the firm's recovery posture against defined impact tolerances, flagging where resilience capability gaps could prevent the firm from

remaining

within tolerance during a severe but plausible disruption.

Contribute to operational risk appetite frameworks as they relate to resilience and recoverability risks.

Build trusted relationships with the 1LoD resilience teams, Technology Infrastructure, Site Reliability Engineering, Cyber/Information Security, Third Party Risk, and business leadership.

Serve as a technically credible challenge partner to Engineering and Product teams on resilience architecture decisions —

able to engage substantively on design trade-offs, not just governance

process

.

Promote a culture where resilience is understood as an interconnected, technically grounded discipline rather than a siloed compliance activity.

Required Qualifications

10+ years of experience spanning

BC/DR and

e

nterprise

r

esilience, with deep hands-on technical grounding in at least one

associated

discipline

s

.

Strong command of disaster recovery concepts including RTO/RPO design and validation, recovery tiering, active/passive and active/active failover architectures, data replication technologies, backup and restoration methodologies, and dependency mapping.

Experience assessing or governing disaster recovery capabilities in complex, technology-intensive environments —

including

on-premise

data centers, hybrid infrastructure, and cloud-native or multi-cloud architectures.

Proven 2LoD experience with

demonstrated

ability to provide credible independent oversight and

challenge

, including the technical depth to go beyond policy review and assess actual capability.

Experience engaging constructively with engineering, SRE, and infrastructure teams

Strong analytical and communication skills; able to translate highly technical findings into risk-based narratives for senior and Board-level audiences.

Preferred Qualifications

Professional certifications such as CBCP, MBCI, CRISC, AWS/Azure/GCP certifications, or equivalent technical credentials in infrastructure, cloud, or IT risk.

Experience assessing cyber-informed disaster recovery strategies, including ransomware recovery planning, immutable backup architectures, and clean-room recovery environments.

Exposure to financial market infrastructure, data platforms, or real-time systems where recovery time requirements are exceptionally

tight

and data integrity is paramount.

Experience evaluating third-party and vendor disaster recovery capabilities, including due diligence on critical technology suppliers.

Salary Range = 185,000 - 245,000 USD Annual + Benefits + Bonus

The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.

We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.

Discover what makes Bloomberg unique - watch our

podcast series

for an inside look at our culture, values, and the people behind our success.