Senior Enterprise Risk & Resilience Lead

PRS for Music; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

PRS for Music is seeking an experienced Risk & Compliance professional to identify, assess and manage enterprise, operational, resilience and third‑party risks. You will maintain risk frameworks, coordinate assurance activities and report to enable informed decisions, strengthening business continuity and incident response across the organisation.

You will work across Technology, Cyber Security, Legal and Procurement to embed risk ownership, monitor controls and support remediation while

Qualifications

• Degree or equivalent in Risk Management, Governance, Compliance or related
• Professional certification in risk/compliance field (CRISC, CISA, CBCI, MBCI) or progress toward accreditation
• Strong knowledge of risk and control frameworks (ISO 31000, ISO 27001, NIST)
• Experience designing, implementing and testing controls, continuity, DR, incident response and crisis management
• Experience with third-party risk management, supplier assurance and policy governance
• Ability to develop KPIs/KRIs and management reporting for risk-based decisions
• Strong stakeholder management and communication with senior leadership and auditors

Responsibilities

• Act as a primary resilience domain contact and define resilience requirements for critical operations
• Develop and maintain resilience documents (Policies, BCPs, BIAs, DR Plans) and playbooks
• Define business continuity, disaster recovery, incident response and crisis management plans
• Lead crisis response resources and run simulation exercises to test readiness
• Coordinate with CIO teams to maintain resilient recovery solutions and data protection

Skills

Risk management

Business continuity

Governance

Communication

Education

Degree in Risk Mgmt

Certification: CRISC / CISA

Tools

NIST framework

ISO 31000

ISO 27001

Job description

PRS for Music is seeking an experienced Risk & Compliance professional to identify, assess and manage enterprise, operational, resilience and third‑party risks. You will maintain risk frameworks, coordinate assurance activities and report to enable informed decisions, strengthening business continuity and incident response across the organisation.

You will work across Technology, Cyber Security, Legal and Procurement to embed risk ownership, monitor controls and support remediation while