Operational Resilience Manager
HybridLondon, England, United Kingdom
Job Summary
Maintain and enhance the Bank's operational resilience framework, ensuring alignment with regulatory expectations and FCA/PRA requirements. Build strong relationships across business and technology teams to coordinate resilience activities, influence stakeholders, and drive timely delivery of outcomes. Own the scenario testing programme, including the design, planning, facilitation, and evaluation of severe-but-plausible exercises linked to important business services and impact tolerances. Coordinate the identification, review, and governance of service maps, dependencies, and vulnerabilities while tracking remediation actions through to closure. Produce high-quality reporting and self-assessment material for senior management and Board-level governance forums, supporting internal audit and regulatory engagement. Report to the Head of Technology and work closely with Information Security, Vendor Management, and Risk and Compliance.
Required Qualifications
- Extensive experience in operational resilience, technology risk, operational risk, business continuity, resilience assurance, or a related risk and governance discipline within banking or regulated financial services
- Strong practical knowledge of the UK FCA/PRA operational resilience regime, including Important Business Services, impact tolerances, service mapping, scenario testing, vulnerability management and self-assessment
- Practical experience developing, maintaining or operating operational resilience frameworks and governance, with the ability to translate regulatory expectations into proportionate processes, guidance and evidence requirements
- Strong experience designing, facilitating and evaluating severe-but-plausible resilience scenarios, including tabletop and cross-business exercises, and driving lessons learned, remediation and retesting through to completion
- Good understanding of the interfaces between operational resilience and technology/ICT resilience, third-party and supplier resilience, business continuity, incident management and operational risk, with experience working across these disciplines in practice
- Working knowledge of DORA and digital operational resilience requirements, particularly in relation to ICT risk, resilience testing, ICT third-party dependencies and incident management
- Experience identifying and assessing dependencies and vulnerabilities across business services, technology, third parties and intra-group arrangements, and translating these into practical resilience improvements
- Strong analytical, reporting and written communication skills, including experience producing risk and resilience reporting, maintaining control evidence, tracking vulnerabilities and remediation actions through to closure, and preparing materials for Executive and Board-level audiences
- Excellent stakeholder management and influencing skills, with the ability to build credibility, gain buy-in and coordinate delivery across business, technology, risk and third-party management functions without direct authority
Desired Qualifications
- CBCI, MBCI, CRISC, CISM, ISO 22301, ISO 27001, COBIT or equivalent practical experience
- Experience supporting internal audit, regulatory reviews or operational resilience assurance activity
- Experience operating within FCA, PRA, DORA or similar regulatory frameworks
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.