Cyber Resiliency and Recovery Expert

Cyber Resiliency and Recovery Expert

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Job Description

The Cyber Resiliency and Recovery Expert plays a hands-on assurance role in ensuring the organisation can withstand and rapidly recover from major cyber incidents - especially ransomware events. Working in the 2nd line of defence, this role conducts structured, evidence-based assessments of recovery capabilities and applies an independent lens to evaluate and measure recovery readiness, objectively assess gaps and provide recommendations for leadership action.

Key Responsibilities

• Design and maintain an enterprise-wide Recovery Readiness & Assurance Framework, including measurable validation criteria and success indicators.
• Assess recovery runbooks against defined success criteria — identifying gaps, untested assumptions, and sequencing risks
• Establish consistent validation and testing processes, driving continuous improvement in cyber recovery readiness.
• Conduct detailed analysis of technical recovery architectures, verifying assumptions and dependencies, limitations and operational feasibility.
• Independently validate recovery capabilities, including completeness of backups, restoration feasibility, interconnection testing and data reconciliation approaches.
• Identify hidden dependencies, potential failure points, and resilience gaps across systems, processes, and teams.
• Plan and execute structured recovery simulations and scenario-based validation exercises (e.g., ransomware, data corruption).
• Validate restoration sequencing, decision points, and end-to-end execution workflows to ensure operational readiness.
• Document validation evidence, outcomes, and readiness assessments, ensuring clarity and transparency.