Search

Disaster Recovery / Business Continuity Consultantm [Healthcare industry]

PublishedPublished: 6/14/2022

Job Description

WHO WE ARE

\n

Datamtx (www.datamtx.com / formerly Datamatics) established in 1993 is globally HQ'd in Atlanta with a stellar history supporting both Tier 1 and 2 ERP / MES projects including: S/4HANA, JDE, Oracle Cloud ERP, Peoplesoft, Deltek, Infor (M3 / S3 / Syteline / LN / Factory Track / MacPac XE / LX, XA, CPQ), IFS, Deltek, Blackbaud, Ellucian Banner, D365, SysPro, Epicor, Plex, BlackLine, etc..

\n

Our ERP / MES projects cover the gamut of typical implementation but we also support bespoke projects and specialty staffing needs covering: data cleanse, customizations, lift & shift, cloud & data migrations, M&A consolidations, Hypercare and Day 1 support. We are also globally partnered with some of some of the Top Accounting, Advisory and Audit firms.

\n


\n

(400-Hour Remote Engagement)

\n

Flexible Hours / Part-time Acceptable

\n

Engagement Period: Nov'26-Apr'27

\n


\n

Position Summary

\n

DataMTX is seeking a senior Disaster Recovery (DR) and Business Continuity Planning (BCP) Consultant to support a healthcare client in strengthening organizational resilience, disaster preparedness, cyber recovery capabilities, and healthcare continuity operations.

\n

The consultant will evaluate current-state recovery processes, conduct Business Impact Analysis (BIA) workshops, assess technology recovery readiness, develop recovery strategies, update policies and procedures, facilitate tabletop exercises, and deliver actionable recommendations aligned with healthcare regulatory requirements and industry best practices.

\n


\n

Expected Scope of Work

\n

Phase 1: Current-State Assessment (80 Hours)

\n

    \n
  • Review existing BCP, DR, Emergency Operations, and Incident Response documentation
  • \n

  • Assess current disaster recovery architecture and backup strategies
  • \n

  • Review healthcare application dependencies
  • \n

  • Evaluate recovery capabilities for:
  • \n

  • EHR / EMR systems
  • \n

  • Clinical applications
  • \n

  • Imaging systems (PACS)
  • \n

  • ERP / Financial systems
  • \n

  • Identity and access management
  • \n

  • Network infrastructure
  • \n

  • Cloud services
  • \n

  • End-user computing
  • \n

  • Review cybersecurity resilience controls
  • \n

\n

Phase 2: Business Impact Analysis (BIA) (80 Hours)

\n

Facilitate workshops with:

\n

    \n
  • Clinical Operations
  • \n

  • Emergency Department
  • \n

  • Laboratory Services
  • \n

  • Imaging
  • \n

  • Pharmacy
  • \n

  • Revenue Cycle
  • \n

  • Finance
  • \n

  • Human Resources
  • \n

  • IT
  • \n

  • Executive Leadership
  • \n

\n

Identify:

\n

    \n
  • Critical business processes
  • \n

  • Recovery Time Objectives (RTO)
  • \n

  • Recovery Point Objectives (RPO)
  • \n

  • Minimum staffing requirements
  • \n

  • Downtime procedures
  • \n

  • Third-party dependencies
  • \n

\n


\n

Phase 3: DR & BCP Strategy Development (100 Hours)

\n

Develop:

\n

    \n
  • Enterprise Business Continuity Plan
  • \n

  • Technology Disaster Recovery Plan
  • \n

  • Cyber Recovery Plan
  • \n

  • Emergency Communications Plan
  • \n

  • Incident Escalation Procedures
  • \n

  • Recovery Runbooks
  • \n

  • Application Recovery Sequencing
  • \n

\n

Specific focus areas:

\n

    \n
  • Ransomware recovery
  • \n

  • Extended power outages
  • \n

  • Data center failures
  • \n

  • Network outages
  • \n

  • Cloud service disruptions
  • \n

  • Medical device interruptions
  • \n

  • Regional disasters
  • \n

  • Pandemic response readiness
  • \n

\n


\n

Phase 4: Testing & Validation (80 Hours)

\n

Execute:

\n

    \n
  • Tabletop exercises
  • \n

  • Executive crisis simulations
  • \n

  • Clinical downtime exercises
  • \n

  • Disaster recovery testing reviews
  • \n

  • Recovery procedure validation
  • \n

\n

Deliver:

\n

    \n
  • Gap Analysis Report
  • \n

  • Lessons Learned Register
  • \n

  • Remediation Roadmap
  • \n

\n


\n

Phase 5: Executive Reporting & Roadmap (60 Hours)

\n

Provide:

\n

    \n
  • Current-State Maturity Assessment
  • \n

  • Risk Register
  • \n

  • Recovery Readiness Scorecard
  • \n

  • Regulatory Alignment Assessment
  • \n

  • 12-Month Improvement Roadmap
  • \n

  • Executive Presentation
  • \n

\n


\n

Required Experience

\n

Healthcare

\n

    \n
  • 8+ years Business Continuity and Disaster Recovery consulting experience
  • \n

  • Experience supporting hospitals or integrated health systems
  • \n

  • Knowledge of healthcare operational workflows
  • \n

  • Experience with Joint Commission readiness programs
  • \n

  • Familiarity with emergency preparedness programs
  • \n

\n

Technical

\n

    \n
  • Disaster Recovery strategy development
  • \n

  • Business Continuity Planning
  • \n

  • Business Impact Analysis
  • \n

  • Cyber Resilience programs
  • \n

  • Ransomware recovery planning
  • \n

  • Backup and recovery architecture
  • \n

  • Cloud DR strategies (Azure, AWS, M365)
  • \n

  • Identity and access recovery
  • \n

  • Network and infrastructure recovery
  • \n

\n

Compliance & Frameworks

\n

Experience with:

\n

    \n
  • HIPAA
  • \n

  • NIST CSF
  • \n

  • NIST 800-34
  • \n

  • HHS Healthcare Cybersecurity Guidelines
  • \n

  • CMS Emergency Preparedness Requirements
  • \n

  • FEMA Incident Command System (ICS)
  • \n

  • Joint Commission Emergency Management Standards
  • \n

\n


\n

Preferred Certifications

\n

Two or more of:

\n

    \n
  • CBCP (Certified Business Continuity Professional)
  • \n

  • MBCI (Member, Business Continuity Institute)
  • \n

  • ISO 22301 Lead Implementer
  • \n

  • CISSP
  • \n

  • CISM
  • \n

  • CRISC
  • \n

  • PMP
  • \n

  • Healthcare Information Security & Privacy Practitioner (HCISPP)
  • \n

\n


\n

Deliverables

\n

At completion, our client should receive:

\n

    \n
  1. Enterprise Business Continuity Plan
  2. \n

  3. Disaster Recovery Program Assessment
  4. \n

  5. Business Impact Analysis Report
  6. \n

  7. Recovery Tier Matrix
  8. \n

  9. Application Dependency Mapping
  10. \n

  11. RTO/RPO Definition Matrix
  12. \n

  13. Cyber Recovery Playbook
  14. \n

  15. Executive Crisis Communications Plan
  16. \n

  17. Disaster Recovery Test Scripts
  18. \n

  19. Tabletop Exercise Materials
  20. \n

  21. Gap Assessment & Risk Register
  22. \n

  23. Remediation Roadmap & Budget Recommendations
  24. \n

\n


Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...