Role Summary:
- Accountable for disaster recovery governance, business continuity alignment, the Minimum Viable Company program, cold start capability, crisis readiness, and the enterprise recovery exercise calendar.
- Coordinate Minimum Viable Company activity across CIO towers and sites on behalf of the CISO and CIO, translating business resilience priorities into technology recovery standards and measurable readiness outcomes.
- During disruptive events, lead recovery and restoration as the coordinated peer to the Incident Commander, providing disciplined execution, single-source recovery status, and clear reporting to the CISO, CIO, and audit stakeholders.
Job Responsibility:
- Own enterprise disaster recovery governance for the technology estate, including recovery standards, critical technology dependencies, recovery time objectives, recovery sequencing, ownership, validation expectations, and exception handling.
- Lead the Minimum Viable Company program for technology recovery, coordinating cross-tower and site-level inputs from CIO teams, information security, operations, business resilience, and other critical stakeholders.
- Define, maintain, and validate cold start capabilities that enable NXP to restore essential technology services when primary environments, identity, network, collaboration, or tooling capabilities are degraded or unavailable.
- Chair the quarterly Recovery Owners' Council to align recovery owners on standards, risks, dependencies, exercise findings, remediation actions, and readiness metrics.
- Build and manage the enterprise recovery exercise calendar, including tabletop, simulation, full-scale, failover, backup and recovery, cyber recovery, out-of-band communications, and site/tower-specific tests.
- Set IT recovery standards that CIO towers build to, and validate those standards through exercises, tests, after-action reviews, audit findings, management reviews, and measurable corrective actions.
- Coordinate with Business Resilience & Crisis Management leaders to align disaster recovery, business continuity, crisis readiness, playbooks, BIAs, ORAs, rosters, communication protocols, reporting, and Fusion platform data where applicable.
- During incidents or crises, lead recovery and restoration activities as a coordinated peer to the Incident Commander, ensuring recovery objectives, resource needs, dependencies, risks, and executive decision points are clear.
- Report resilience readiness, recovery risks, exercise outcomes, audit results, and remediation progress to the CISO, CIO, Management Team stakeholders, and audit committee forums as required.
- Drive continuous improvement of enterprise resilience capability through KPIs, lessons learned, third-party or internal audit inputs, regulatory and standards alignment, and pragmatic prioritization of risk reduction across technology services.
Job Qualification:
- Bachelor's degree or above in Information Technology, Cybersecurity, Computer Science, Engineering, Business Continuity, Risk Management, or a related field; advanced degree preferred.
- 15+ years of progressive leadership experience across technology resilience, disaster recovery, business continuity, information security, infrastructure, enterprise IT operations, risk management, or crisis management.
- Demonstrated experience leading enterprise disaster recovery or cyber recovery programs for complex, global technology environments, including critical infrastructure, applications, network, identity, cloud, endpoint, data, and collaboration services.
- Strong understanding of business impact analysis, recovery time objectives, recovery point objectives, dependency mapping, operational resilience, service continuity, and recovery validation methods.
- Experience coordinating cross-functional programs across CIO, CISO, business, manufacturing/site, legal, communications, audit, risk, and executive leadership stakeholders.
- Practical knowledge of crisis management, incident command concepts, playbooks, communications protocols, after-action reviews, and executive reporting during disruptive events.
- Ability to translate complex technical dependencies and recovery constraints into clear executive-level decisions, priorities, risk statements, and action plans.
- Experience designing and executing tabletops, simulation, full-scale, failover, backup and recovery, cyber recovery, and out-of-band communication exercises.
- Familiarity with international resilience, continuity, crisis, incident, and risk management standards such as ISO 22301, ISO 22316, ISO 22320, ISO 22361, ISO 31000, COSO ERM, and relevant industry requirements.
- Strong governance discipline with experience establishing standards, metrics, remediation tracking, audit evidence, management reporting, and continuous improvement mechanisms.
- Proven ability to lead through ambiguity and pressure, maintain calm and credible communications, and coordinate multiple teams toward measurable recovery outcomes.
- Excellent written and verbal communication skills in English; able to engage technical teams, senior executives, auditors, and external stakeholders with clarity and credibility.
- Collaborative, pragmatic leadership style with the ability to influence without direct authority across global teams, sites, and technology towers.
- Relevant certifications are preferred, such as CBCP, MBCI, ISO 22301 Lead Implementer/Auditor, CISSP, CISM, CRISC, ITIL, or comparable credentials.
- Willingness to participate in crisis response, exercises, and time-sensitive recovery coordination across global time zones as business needs require.
More information about NXP in the United States...
NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.
#LI-97b2