Principal Consultant (Senior Manager) - Operational Resilience & Cyber

capco; United States; Hybrid; USD 160,000 - 226,000; Full time

Job summary

Capco seeks a Principal Consultant to lead Operational Resilience and Cyber Risk engagements, guiding complex transformations for financial services and energy clients. You’ll shape strategy, oversee governance models, and drive AI-enabled delivery while ensuring responsible oversight.

You’ll leverage PRA/DORA expertise to implement robust resilience frameworks, IBS/ITOL calibration, and risk-based improvements across programmes and client engagements.

Qualifications

• Extensive experience delivering operational resilience and cyber/third-party risk programs for financial services, energy, or consulting.
• Strong understanding of PRA, DORA, ITOL, IBS and governance requirements.
• Proven track record leading complex transformation programs and operating model changes.

Responsibilities

• Lead resilience assessments, scenario testing and governance design across IBS/ITOL and reporting.
• Advise on regulatory readiness and translate requirements into practical transformation plans.
• Oversee cyber risk, third-party risk and vendor resilience initiatives with AI-augmented analytics.

Skills

Operational resilience

Cyber risk

Third-party risk

Regulatory frameworks

Transformation leadership

AI/Analytics

Tools

AI tools

Automation

Job description

Principal Consultant (Senior Manager) - Operational Resilience & Cyber Risk

Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent

The Role

Capco is seeking experienced Principal Consultants in Operational Resilience and Cyber Risk to join our growing Finance, Risk, Regulatory & Financial Crime (FRRF) capability. In this senior role, you'll lead complex client engagements across financial services and energy, advising on regulatory expectations such as PRA and DORA while driving the design and implementation of robust resilience frameworks. You'll play a key role in shaping client strategy, leading transformation programmes, and contributing to capability growth. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, accelerate insight generation, and improve delivery while applying responsible AI practices and appropriate human oversight.

What You'll Do

• Lead operational resilience assessments, scenario testing, and control implementation programmes, identifying opportunities to leverage AI-enabled workflows and automation to strengthen resilience outcomes.
• Advise clients on regulatory readiness across PRA, DORA, and other resilience frameworks, translating regulatory expectations into practical transformation strategies and sustainable operating models.
• Oversee cyber risk, third-party risk, and vendor resilience assessments, using AI-enabled analytics where appropriate to strengthen risk identification, prioritisation, and decision-making.
• Design and implement governance models, dashboards, Important Business Services (IBS), Impact Tolerance (ITOL), and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised.
• Lead cyber and technology resilience transformation initiatives, including tooling, cloud security, and control enhancements, while contributing to business development, proposition development, and capability growth.

What We’re Looking For

• Extensive experience delivering operational resilience, cyber risk, and third-party risk transformation within financial services, energy, or management consulting.
• Strong understanding of regulatory frameworks including PRA, DORA, and related operational resilience standards.
• Proven experience leading complex transformation programmes, including scenario testing, IBS/ITOL calibration, control remediation, and operating model transformation.
• Experience using approved AI tools, automation, or advanced analytics to enhance resi