Business Continuity Analyst

Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change. By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses. From prototype to real-world impact - be part of a global shift by doing work that matters. Business Continuity Analyst reports to the Head of Business Continuity and supports the implementation, maintenance and continual improvement of Endava’s Business Continuity Management System (BCMS), ensuring alignment with Endava policies, client requirements and internationally recognized standards, including ISO 22301. The role is responsible for supporting business continuity planning, business impact analysis, risk assessments, exercising and testing, audit activities, awareness programmes and third-party resilience assessments. The Business Continuity Analyst works closely with business, technology and corporate functions to strengthen Endava's operational resilience and ensure business continuity risks are appropriately identified, assessed, managed and monitored. Key Responsibilities Business Continuity Management Support the implementation, maintenance and continual improvement of Endava's Business Continuity Management System (BCMS) in line with ISO 22301 requirements. Facilitate Business Impact Analyses (BIA), Business Continuity Risk Assessments and the development and maintenance of Business Continuity Plans (BCPs). Designs and delivers business continuity awareness, exercising and testing activities; Business Continuity Audit Support the planning and execution of internal and external business continuity audits, including ISO 22301 certification activities. Coordinate stakeholders during audit and assurance activities, ensuring timely delivery of evidence and required documentation. Prepare audit reports, monitor corrective actions and support continual improvement of the BCMS. Business Continuity Risk Management Support the identification, assessment and management of business continuity and operational resilience risks across the organization. Perform business continuity risk assessments for critical suppliers and third parties, ensuring appropriate resilience controls are in place. Monitor the implementation of risk treatment actions and provide regular reporting on business continuity risks and emerging issues. Availability Management Monitor and review disaster recovery testing activities for critical IT services, ensuring recovery objectives (RTO/RPO) are validated and improvement actions are tracked to closure. Review disaster recovery capabilities, backup arrangements and recovery objectives (RTO/RPO) for critical IT services, working with Internal Technology teams to validate recovery readiness. Support post-incident reviews, disaster recovery testing and resilience improvement initiatives, ensuring recovery gaps, lessons learned and improvement actions are documented and tracked to closure. Experience supporting the implementation, maintenance and continual improvement of a Business Continuity Management System (BCMS) aligned with ISO 22301. Experience participating in internal or external audits, either as an auditor or as a subject matter expert supporting audit activities. Good understanding of IT resilience, disaster recovery principles and resilient infrastructure architectures, including familiarity with Microsoft Azure resilience and recovery capabilities. Ability to work independently and collaboratively within cross-functional and geographically distributed teams to deliver business continuity and operational resilience initiatives. Strong analytical, communication and stakeholder management skills, with the ability to engage effectively with both technical and business audiences. Professional Certifications (preferred) ISO 22301 Auditor, Implementer or equivalent Business Continuity certification. BCI certifications (e.g. CBCI, CBCM or equivalent). ISACA certifications such as CRISC or CISA. Microsoft Azure certifications related to resilience, business continuity or disaster recovery. At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.