VP/Director - Enterprise Resilience (Contract)

Cyber Security training courses; Greater London; Hybrid; GBP 180,000 - 230,000; Full time

Job summary

Cyber Security training courses seeks a Contract Director of Enterprise Resilience to lead global Business Continuity and Operational Resilience. The role involves defining the Enterprise Resilience strategy, operating model, policy, and governance across a regulated international environment, reporting to senior leaders and regulators.

You will lead a global team, partner with risk and technology, and drive resilience across major programmes and migrations while ensuring adherence to regulatory

Qualifications

• Senior leadership experience in Operational Resilience and Business Continuity within financial services.
• Experience delivering enterprise-wide resilience strategies and transformation programmes.
• Strong regulatory engagement experience and ability to interact with C-suite and boards.

Responsibilities

• Define and deliver the global Enterprise Resilience strategy and operating model.
• Lead and develop a global Operational Resilience and Business Continuity team.
• Own and mature the organisation's Operational Resilience framework, standards, controls and governance.
• Lead the Important Business Services lifecycle, including mapping, tolerances and testing.
• Ensure vulnerabilities are identified, prioritised and remediated with clear accountability.
• Oversee Business Continuity Management aligned to ISO 22301 and best practices.
• Manage resilience governance, KPIs and Board-level reporting.
• Partner with risk to embed resilience within risk appetite and KRIs.
• Collaborate with Technology, Cyber and third parties to strengthen resilience.

Skills

Operational Resilience

Business Continuity

Regulatory engagement

Leadership

Stakeholder management

Cross-functional collaboration

Tools

Fusion

ServiceNow

Archer

Job description

Contract Director of Enterprise Resilience

Financial Services | London / Hybrid | Contract

We are partnering with a major global financial services and market infrastructure organisation to appoint a Contract Director of Enterprise Resilience to lead its Business Continuity and Operational Resilience capabilities globally. This is a highly influential leadership mandate with responsibility for defining and delivering the organisation's Enterprise Resilience strategy, operating model, policy and framework across a complex, highly regulated international environment. Leading a global team, you will act as the organisation's senior subject matter expert for Enterprise and Operational Resilience, working closely with C-Suite executives, Board-level stakeholders, regulators and senior leaders across Technology, Cyber, Risk, Third-Party Risk, Crisis Management and the wider business.

The opportunity

A key priority will be bringing Operational Resilience and Business Continuity together under a single enterprise-wide operating model, moving the organisation towards a more outcome-focused approach to resilience. You will have ownership of the multi-year resilience strategy and roadmap, ensuring that Important Business Services remain within agreed impact tolerances and that vulnerabilities across technology, people, processes, data, premises and third parties are understood and addressed.

Key responsibilities will include:

• Define and deliver the global Enterprise Resilience strategy and operating model.
• Lead and develop a global Operational Resilience and Business Continuity team.
• Own and mature the organisation's Operational Resilience framework, standards, controls and governance.
• Lead the Important Business Services lifecycle, including identification, end-to-end mapping, impact tolerances and scenario testing.
• Ensure resilience vulnerabilities are identified, prioritised and remediated with clear accountability.
• Own the Business Continuity Management framework, aligned to ISO 22301 and BCI Good Practice Guidelines.
• Oversee BIAs, recovery strategies, continuity plans and risk-based testing and exercising.
• Develop resilience governance, KPIs, KRIs and Board-level management information.
• Partner closely with second-line Risk to embed resilience within risk appetite, RCSA, KRIs, scenario analysis and the wider risk taxonomy.
• Strengthen integration with Technology, Cyber, Crisis & Incident Management, Third-Party Risk, Data, Physical Security and Change.
• Provide resilience challenge and oversight for major transformation programmes, migrations and new products.
• Lead resilience regulatory engagement, including self-assessments, attestations, supervisory reviews and audits.
• Represent the organisation with regulators, industry bodies and sector-wide resilience exercises.

Regulatory exposure

Given the organisation's global footprint, you will require strong working knowledge of international Operational Resilience requirements, potentially including:

• UK: FCA PS21/3, PRA PS6/21 and Bank of England Operational Resilience requirements
• EU: DORA, including ICT risk, resilience testing, TLPT and third-party oversight
• US: SEC Regulation SCI, CFTC system safeguards and broader operational resilience requirements
• APAC: MAS BCM Guidelines, HKMA OR-2 and APRA CPS 230
• Global: CPMI-IOSCO PFMI, Basel Committee Principles for Operational Resilience and ISO 22301

What we're looking for

This is a senior leadership appointment and we are looking for someone who has already operated at significant scale within a complex, highly regulated financial services environment.

You are likely to bring:

• Extensive senior-level experience across Operational Resilience and Business Continuity within financial services.
• A track record of designing and delivering enterprise-wide resilience strategies and transformation programmes.
• Deep understanding of Important Business Services, impact tolerances, scenario testing, mapping and vulnerability remediation.
• Strong knowledge of multi-jurisdictional resilience regulation with direct regulatory engagement experience.
• Experience partnering with Crisis and Incident Management teams through real-world disruptions.
• Strong understanding of the Three Lines of Defence, including close partnership with second-line Risk.
• Experience influencing and challenging C-Suite and Board-level stakeholders.
• Proven leadership of geographically dispersed/global teams.
• Strong understanding of dependencies across Technology, Cyber, third parties, data, people and physical infrastructure.
• Experience with resilience platforms such as Fusion, ServiceNow or Archer would be advantageous.
• Experience within financial market infrastructure, exchanges, clearing, payments, market data or similarly systemic financial institutions would be particularly attractive.

#4843321 - Craig Murray