Cyber Recovery Lead

Barclays; Knutsford; On-site; GBP 110,000 - 140,000; Full time

Job summary

Barclays is seeking a Cyber Recovery Lead to drive technology recovery workstreams across major cyber incidents, coordinating with Incident Management, Technology and Cyber Operations. The role emphasizes resilient recovery planning, testing, and governance to protect important business services and stakeholders.

You will lead cross-functional teams at the Knutsford office, ensuring effective incident response, regulatory alignment, and continuous improvement in resilience and recovery

Qualifications

• Experience leading technology recovery during major cyber incidents.
• Expertise in cyber recovery principles, testing, tools and processes.
• Strong communication and coordination skills with senior stakeholders under pressure.

Responsibilities

• Socialise and implement the resilience strategy and framework across the firm, ensuring compliance to standards and controls.
• Develop and enhance resilience, crisis and incident management to uplift recovery and response capabilities.
• Improve Operational Recovery Planning and Security Incident Management standards in line with industry practice and regulation.
• Provide oversight to recovery capabilities, including third-party providers, to meet impact tolerance thresholds.
• Communicate resilience position and remediation status through scorecards and dashboards for boards and committees.
• Lead testing coverage to demonstrate ability to recover during severe scenarios.
• Ensure services are built resiliently via change management processes and governance.
• Stay abreast of regulatory developments and emerging threats impacting recovery.
• Identify and respond to incidents to protect services, operations and clients.
• Document lessons learned to drive preventative measures and process improvements.

Skills

Cyber recovery leadership

Incident management coordination

Regulatory standards

Senior stakeholder communication

Recovery tooling (Rubrik)

Tools

Rubrik

Recovery tooling

Job description

Join us in Technology Operations rooted in our Global Technology Command Centre. Our goal is to ensure service stability, providing consistent rapid response to issues impacting our Customers and Clients.As a Cyber Recovery Lead, you will be a highly experienced Technologist with a deep understanding of the current Cyber threat landscape. You will be joining a focused team to drive real world processes and tools to recover technologies underpinning our Businesses in the event of a Cyber incident impacting our Services. You will work closely with cross-functional teams to design, develop, and optimize technical and operational processes and ensure our testing is in line with the Banks directions and provides real world recovery practice. With excellent leadership and influencing skills, you will be leading technology recovery workstreams that would function during major cyber incidents, working closely with Incident Management, Technology teams, Cyber Operations, and senior technology stakeholders.

To be successful as a Cyber Recovery Lead, you should have:

• Experience in leading Technology Recovery during major Cyber incident and crisis.
• Extensive experience of cyber recovery principles, best practices, testing, tools and processes.
• Exceptional communication and coordination skills. Ability to manage senior stakeholder demands and operate effectively under pressure in a dynamic environment.

Some other highly valued skills include:

• Experience with recovery tools and technologies such as Rubrik.
• Knowledge of global cyber recovery regulations and standards.
• Proven experience supporting major cyber incident recovery, including ransomware.

You may be assessed on key critical skills relevant for success in role, such as risk and controls, communication skills and interaction with a diverse range of stakeholders, as well as job-specific technical skills.

This role is based out of our Knutsford office.

Purpose of the role

To develop, implement, and maintain an effective resilience strategy and Operational Recovery Planning and Incident Management framework aligned to industry leading standards and controls and regulatory expectations, to enable the bank to respond and recover important business services to severe but plausible scenarios, and minimise the impact to customers, clients, colleagues and the wider market.

Accountabilities

• Socialisation and implementation of the resilience strategy and underpinning framework across the firm (e.g. SMRs and delegates, business / function resilience role owners and all colleagues), ensuring complaince to the standard and controls.
• Development and enhancement of the resilience, crisis and incident management framework to uplift recovery and response capabilities to ensure Important Business Services can continue to operate during disruption events to minimise the impact on customers, clients and the market.
• Operational Recovery Planning and Security Incident Management planning standards and controls enhancement according to industry practice, emerging threats and regulatory requirements.
• Provide oversight to the business and technology recovery capability improvements, and uplifts to third-party (suppliers and Financial Market Infrastructure) recovery capabilities to enable Important Business Services to remain within or mitigate impact tolerance thresholds.
• Communication of the firm’s / business’ resilience position (risks and remediation) through clear and transparent scorecards / dashboards to enable effective investment decisions to the Board and Executive Committees, Control Forums and business stakeholders.
• Enhancement of resilience, crisis management and incident response and recovery capability through sophisticated, regular and adequate testing coverage to demonstrate Important Business Services’ ability to recover within impact tolerance for a severe but plausible scenario.
• Assurance that services and products are built resiliently by the business through the change management process (NAPAs, DRAs, material change process).
• Continually remain abreast of resilience and crisis and incident management developments, regulatory policy requirements and the emerging landscape.
• Mitigation of the impact of unexpected incidents by identifying , responding to and enabling the resolution of events that threaten the services, operations, infrastructure, colleagues and clients of the bank.
• Execution of responses to reported incidents and potential threats from various channels including intelligence, email, phone and monitoring systems prioritised by the assessed or actual impact to the bank.
• Documentation and analysis of past prioritised incident details, the steps to resolution and the lessons learnt to support the identification and implementation of preventative measures and process improvements.

Vice President Expectations

• To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/ processes; deliver continuous improvements and elevate breaches of policies/procedures..
• If managing a team, they define jobs and responsibilities, planning for the department’s future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements..
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others..
• OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi-year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions..
• Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment.
• Manage and mitigate risks through assessment, in support of the control and governance agenda.
• Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does.
• Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies.
• Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In-depth analysis with interpretative thinking will be required to define problems and develop innovative solutions.
• Adopt and include the outcomes of extensive research in problem solving processes.
• Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.