Cyber Resilience Manager
London (Hybrid) – 12-Month Fixed Term Contract
Lead and shape cyber resilience in a highly complex environment.
We're looking for a Cyber Resilience Manager to establish and embed an enterprise-wide resilience capability, including a Resiliency Framework and Technical Recovery Policy.
This is a strategic, high-impact role where you'll take ownership of resilience governance, ensuring the organisation is prepared to respond to and recover from major cyber and operational incidents. You'll work across business and technology teams, translating resilience risk into clear technical requirements and guiding implementation to meet recovery objectives.
You'll also act as a key escalation point during incidents, deputising for the Head of Security Risk, and play a central role in strengthening the organisation's overall operational resilience posture.
Key Responsibilities
- Policy Ownership & Governance: Own and enforce the Technical Recovery Policy, ensuring compliance across all critical services and stakeholders
- Resilience Oversight: Act as Product Owner for resilience within the technology backlog, defining Non-Functional Requirements (NFRs) and ensuring delivery
- Risk Management: Own the resilience risk register, identifying, quantifying, and presenting risks to support informed decision‑making
- Business‑to‑Technical Translation: Translate business resilience needs into clear technical requirements, including RTO/RPO targets
- Vendor Assurance: Conduct assurance reviews of key suppliers and SaaS providers to ensure alignment with resilience standards
- Continuous Improvement: Lead post‑incident reviews, embedding lessons learned into technical solutions, processes, and recovery plans
- Leadership: Act as Deputy to the Head of Security Risk during crisis situations and line manage a Resilience Analyst
Skills & Experience (Essential)
- 5+ years' experience in Cyber Security, Business Continuity, IT Disaster Recovery, or Operational Resilience
- Proven track record of building and embedding resilience or recovery frameworks in complex environments
- Strong technical understanding (e.g. backups, failover, cloud resilience), with the ability to engage senior technical stakeholders
- Experience in risk management, including maintaining risk registers and presenting at governance forums
- Ability to influence and drive alignment across senior stakeholders
Desirable Experience
- Relevant certifications (e.g. CISSP, MBCI, CRISC)
- Knowledge of ISO 22301, NIST, or operational resilience frameworks
- Experience in high‑availability environments (e.g. media, telecoms, financial services)
- Strong stakeholder engagement and project management skills
#J-18808-Ljbffr