Technical Specialist in Operational Resilience
Bank of England
Turn this role into an interview — a resume and cover letter built around what this employer wants.
Benefits offered by this job
Job summary
The Bank of England in Leeds is recruiting a Technical Specialist - Cyber Risk to provide expert guidance on cyber risk, operational resilience and third-party risk across UKDT non-systemic firms. You will support supervisory teams with firm assessments, thematic reviews and incident response activities to prevent, respond to and recover from incidents.
You will develop supervisory approaches, produce high-quality reports, and engage senior stakeholders across the Bank, delivering practical
Qualifications
- Experience in cyber security, technology risk, operational resilience, operational risk, audit or a related discipline.
- Experience assessing or managing technology and cyber risks within a regulated environment.
- Experience conducting reviews, audits, assurance work or risk assessments.
- Strong analytical skills and the ability to produce clear written reports and recommendations.
- Ability to communicate complex technical issues to non-technical stakeholders.
- Knowledge of cyber resilience, technology risk and operational resilience frameworks.
- Knowledge of PRA operational resilience, incident reporting and material third‑party/outsourcing policy.
- Understanding of technology outsourcing and third‑party risk management.
- Ability to identify key risks, root causes and supervisory implications.
- Strong stakeholder management and influencing skills.
Responsibilities
- Lead cyber risk and operational resilience reviews of regulated firms.
- Provide technical support and advice to supervisory teams.
- Support the PRA's response to significant cyber and operational incidents.
- Lead or contribute to cross-firm thematic reviews and horizontal work.
- Assess firms' cyber and operational resilience capabilities, outsourcing arrangements and third‑party dependencies.
- Produce high-quality supervisory assessments, reports and recommendations.
- Engage with senior stakeholders within firms and across the Bank.
- Coach and develop colleagues, may include line management responsibilities.
Skills
Job description
The UK Deposit Takers (UKDT) Directorate is responsible for the supervision of over 600 UK banks, building societies and credit unions. Its aim is to contribute to a safe, sound and competitive UK banking system through delivering effective prudential supervision.
The Operational Risk & Resilience (ORR) Hub is one of the specialist teams within UKDT Specialist Supervision Division, supporting the supervision of operational risk and resilience across UKDT non-systemic firms. The work we do is varied and wide-ranging, including leading cross-firm thematic and firm‑specific reviews, and supporting the PRA's response to operational incidents at firms. We also work closely with colleagues in SRS and the other Directorates across PRA/ FMID on ORR related risks.
The Technical Specialist - Cyber Risk, provides specialist expertise predominantly on cyber risk, but is also expected to support on operational resilience, technology and third‑party risk related work across UKDT non-systemic firms. The role supports supervisory teams through firm assessments, thematic reviews, incident response activity and technical advice, helping ensure firms can prevent, respond to and recover from operational disruptions. The role also contributes to the development of supervisory approaches, supports engagement with senior stakeholders at firms.
- Lead cyber risk and operational resilience reviews of regulated firms.
- Provide technical support and advice to supervisory teams.
- Support the PRA's response to significant cyber and operational incidents.
- Lead or contribute to cross-firm thematic reviews and horizontal work.
- Assess firms' cyber and operational resilience capabilities, outsourcing arrangements and third‑party dependencies.
- Produce high-quality supervisory assessments, reports and recommendations.
- Engage with senior stakeholders within firms and across the Bank.
- Coach and develop colleagues, may include line management responsibilities.
- Experience in cyber security, technology risk, operational resilience, operational risk, audit or a related discipline.
- Experience assessing or managing technology and cyber risks within a regulated environment.
- Experience conducting reviews, audits, assurance work or risk assessments.
- Strong analytical skills and the ability to produce clear written reports and recommendations.
- Ability to communicate complex technical issues to non-technical stakeholders.
- Strong knowledge of cyber resilience, technology risk and operational resilience frameworks.
- Knowledge of PRA operational resilience, incident reporting and material third‑party/outsourcing policy.
- Understanding of technology outsourcing and third‑party risk management.
- Ability to identify key risks, root causes and supervisory implications.
- Strong stakeholder management and influencing skills.
- Experience leading workstreams, projects or supervisory reviews.
- Ability to manage competing priorities and deliver high-quality outcomes.
- Strong verbal and written communication skills.
- Experience coaching, mentoring or developing others.
- Knowledge of technology governance, risk and controls frameworks and standards, such as COBIT, ITIL and ISO 27001.
- One or more related IT risk qualifications, relevant educational background or equivalent risk management work experience.
- Knowledge of cloud technology and emerging technology risks.
You should not be put off applying if you do not meet all these criteria - we would encourage you to get in touch to discuss if needed.
The successful candidate will report to the Senior Technical Specialist.
The UK Deposit Takers (UKDT) Directorate is responsible for the supervision of over 600 UK banks, building societies and credit unions. Its aim is to contribute to a safe, sound and competitive UK banking system through delivering effective prudential supervision.
The Operational Risk & Resilience (ORR) Hub is one of the specialist teams within UKDT Specialist Supervision Division, supporting the supervision of operational risk and resilience across UKDT non-systemic firms. The work we do is varied and wide-ranging, including leading cross-firm thematic and firm‑specific reviews, and supporting the PRA's response to operational incidents at firms. We also work closely with colleagues in SRS and the other Directorates across PRA/ FMID on ORR related risks.
The Technical Specialist - Cyber Risk, provides specialist expertise predominantly on cyber risk, but is also expected to support on operational resilience, technology and third‑party risk related work across UKDT non-systemic firms. The role supports supervisory teams through firm assessments, thematic reviews, incident response activity and technical advice, helping ensure firms can prevent, respond to and recover from operational disruptions. The role also contributes to the development of supervisory approaches, supports engagement with senior stakeholders at firms.
- Lead cyber risk and operational resilience reviews of regulated firms.
- Provide technical support and advice to supervisory teams.
- Support the PRA's response to significant cyber and operational incidents.
- Lead or contribute to cross-firm thematic reviews and horizontal work.
- Assess firms' cyber and operational resilience capabilities, outsourcing arrangements and third‑party dependencies.
- Produce high-quality supervisory assessments, reports and recommendations.
- Engage with senior stakeholders within firms and across the Bank.
- Coach and develop colleagues, may include line management responsibilities.
Minimum Criteria
- Experience in cyber security, technology risk, operational resilience, operational risk, audit or a related discipline.
- Experience assessing or managing technology and cyber risks within a regulated environment.
- Experience conducting reviews, audits, assurance work or risk assessments.
- Strong analytical skills and the ability to produce clear written reports and recommendations.
- Ability to communicate complex technical issues to non-technical stakeholders.
Essential Criteria
- Strong knowledge of cyber resilience, technology risk and operational resilience frameworks.
- Knowledge of PRA operational resilience, incident reporting and material third‑party/outsourcing policy.
- Understanding of technology outsourcing and third‑party risk management.
- Ability to identify key risks, root causes and supervisory implications.
- Strong stakeholder management and influencing skills.
- Experience leading workstreams, projects or supervisory reviews.
- Ability to manage competing priorities and deliver high-quality outcomes.
- Strong verbal and written communication skills.
- Experience coaching, mentoring or developing others.
Desirable Criteria
- Knowledge of technology governance, risk and controls frameworks and standards, such as COBIT, ITIL and ISO 27001.
- One or more related IT risk qualifications, relevant educational background or equivalent risk management work experience.
- Knowledge of cloud technology and emerging technology risks.
You should not be put off applying if you do not meet all these criteria - we would encourage you to get in touch to discuss if needed.
The successful candidate will report to the Senior Technical Specialist.
The Bank values diversity, equity and inclusion. We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve.
At the Bank of England, we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work. We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status. We believe that it's by drawing on different perspectives and experiences that we'll continue to make the best decisions for the public.
We welcome applications from individuals who work flexibly, including job shares and part time working patterns. We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
From 1st October 2026, we expect all our colleagues to spend a minimum of 50% of their working time in the office per month. This is to capitalise on the benefits of working together in person across teams, while maintaining the flexibility offered by home working. Subject to that minimum requirement, individuals and managers should work together to find what works best for them and their team.
Finally, we're proud to be a member of the Disability Confident Scheme. If you wish to apply under this scheme, you should check the box in the 'Candidate Personal Information' under the 'Disability Confident Scheme' section of the application.
We encourage flexible working, part time working and job share arrangements. Part time salary and benefits will be on a pro‑rated basis as appropriate.
Salary is circa £65,440 - £73,000. In addition, we also offer a comprehensive benefits package as detailed below:
- Currently a non‑contributory, career average pension giving you a guaranteed retirement benefit of 1/80th of your annual salary for every year worked. There is the option to increase your pension (to 1/65th) or decrease (to 1/105th) in exchange for salary through our flexible benefits programme each year. The Bank has the discretion to vary standard accrual rates and dial up and dial down rates at any time and to withdraw dial up and dial down options at any time.
- A discretionary performance award based on a current award pool.
- An 8% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits.
- 26 days' annual leave with option to buy up to 12 additional days through flexible benefits.
- Private medical insurance and income protection.
Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy. Further information regarding the vetting and security clearance requirements for the role will be provided to the successful applicant, and information about how the Bank processes personal data for these purposes, is set out in the Bank's Privacy Notice.
The Bank of England welcomes applications from all candidates, but as a UK Visas and Immigration (UKVI) approved sponsor, we have a responsibility to comply with the Immigration Rules and guidance. As such, our ability to employ individuals who require sponsorship for immigration purposes is limited. The Bank cannot guarantee that you and / or the role you are applying for will be eligible for sponsorship and that any application made to UKVI will be successful. Eligibility will therefore be considered on a case by case basis.
This role closes on 8th Oct.
Experience in cyber security, technology risk, operational resilience, operational risk, audit or a related discipline.
Experience assessing or managing technology and cyber risks within a regulated environment.
Experience conducting reviews, audits, assurance work or risk assessments.
Strong analytical skills and the ability to produce clear written reports and recommendations.
Ability to communicate complex technical issues to non-technical stakeholders.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
