Cyber Resilience Manager

ITV Consumer Limited 2024; City of Westminster; On-site; GBP 65,000 - 85,000; Full time

Job summary

A leading media company in the United Kingdom is seeking a proactive Cyber Resilience Manager to enhance their ability to withstand and recover from cyber disruptions. You will be responsible for developing comprehensive cyber resilience strategies, conducting exercises, and collaborating with various stakeholders to ensure business continuity. This role demands expertise in cyber security and disaster recovery principles, along with excellent communication skills. Flexible working and generous holidays are part of the benefits offered.

Benefits

Flexible working options

Generous holiday allowance

Annual bonus opportunity

Competitive pension contribution

Wellbeing and volunteering days

Qualifications

• Proven experience in cyber security and business continuity.
• Strong understanding of cyber threats and their business impact.
• Excellent problem-solving and decision-making skills.

Responsibilities

• Develop and implement a holistic cyber resilience plan.
• Collaborate with security operations to maintain recovery plans.
• Design and lead regular cyber resilience exercises.

Skills

Cyber security

Business continuity planning

Disaster recovery

Communication skills

Analytical skills

Education

Certifications like CCRM, CISSP, CISM, or CBCP

Job description

Overview

We\'re looking for a proactive and experienced Cyber Resilience Manager to lead ITV\'s efforts to build and strengthen our ability to withstand, recover from, and adapt to cyber disruptions. You\'ll design, implement, and oversee a comprehensive cyber resilience programme aligned to NIST, ensuring that our incident response, business continuity, and disaster recovery capabilities are robust, well-tested, and ready when needed. You\'ll assess cyber threats, evaluate vulnerabilities, and their potential impact to ensure ITV\'s technology and operational teams are prepared for disruption. You\'ll collaborate across multiple stakeholders, from senior management to third-party suppliers, to embed a culture of cyber resilience, delivering meaningful business impact through preparation, testing and continuous improvement.

Responsibilities

• Develop and implement a holistic cyber resilience plan aligned to business objectives, risk appetite and supporting regulatory requirements—defining resilience goals, identifying critical functions, and setting recovery time objectives (RTOs) and recovery point objectives (RPOs).
• Collaborate with Security Operations to maintain and test ITV\'s cyber recovery plan.
• Work with technology teams and business stakeholders to build and maintain business continuity and disaster recovery plans—covering data recovery, redundancy, and alternative operations.
• Design and lead regular cyber resilience exercises, including simulations, tabletop sessions and technical drills to evaluate the effectiveness of response and recovery plans and identify areas for improvement.
• Collaborate with the security operations team to analyse cyber threats and vulnerabilities, and incorporate threat intelligence into resilience planning to proactively address potential disruptions.
• Communicate and embed cyber resilience strategy across the business, including senior leaders, business units and operational teams.
• Ensure ITV\'s resilience programme aligns with legal, regulatory and industry frameworks (e.g. NIS Directive, GDPR).
• Assess third-party and vendor resilience practices, ensuring alignment with ITV\'s expectations.
• Monitor emerging cyber threats, industry best practices, and technological advancements, and continuously improve the organisation\'s cyber risk and resilience management to enhance its effectiveness.

Qualifications

• Proven experience in cyber security, IT disaster recovery or business continuity, with a focus on cyber resilience.
• Strong understanding of cyber threats, techniques and their business impact.
• Hands-on experience in designing and implementing incident response methodologies, business continuity planning frameworks, and disaster recovery principles.
• Ability to design and conduct effective cyber resilience testing and exercises.
• Excellent communication, presentation, and interpersonal skills, with the ability to communicate technical and non-technical information to diverse audiences.
• Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex situations under pressure.
• Knowledge of relevant legal, regulatory, and industry standards related to cyber security and resilience.
• Knowledge of cloud computing resilience, and regulatory standards (e.g. NIS, GDPR).
• Certifications such as Certified Cyber Resilience Manager (CCRM), CISSP, CISM, or CBCP.
• Experience delivering BCP and DR within mixed-platform environments (on-premise and cloud: IaaS, PaaS, SaaS).
• Strong collaboration and stakeholder engagement skills, working across both tech and business teams.
• Good organisation and project management skills.

Benefits

• Flexible working with a range of options
• Generous holiday allowance, plus you can buy more
• Annual bonus opportunity
• Competitive pension contribution
• Save as you earn - with an opportunity to buy ITV shares
• Wellbeing and volunteering days plus a wide range of opportunities to help you live a balanced and healthy life