Operational Resilience Manager

About the Role:

We are seeking an experienced Operational Resilience Manager to support the continued development, operation and maturity of the Bank’s operational resilience framework.

This role will ensure that operational resilience is embedded across the Bank through clear governance, service ownership, important business service mapping, impact tolerance management, scenario testing, remediation tracking and the continuous management of operational resilience risks across critical business processes. 

The successful candidate will report to the Head of Technology and work closely with Information Security, Vendor Management, Product Management, Engineering, Risk and Compliance. 

Key Responsibilities:

• Maintain and enhance the Bank’s operational resilience framework, ensuring it remains practical, proportionate and aligned to regulatory expectations.

• Build strong relationships across the Bank to coordinate operational resilience activities, influence stakeholders and drive timely delivery of resilience outcomes across multiple business and technology teams.

• Coordinate the ongoing management of operational resilience across the Bank's critical business processes, ensuring resilience insights from operational risk and activities (e.g. incidents, change, third-party risk and scenario testing) are translated into practical resilience improvements.

• Provide operational resilience oversight of critical third-party and intra-group dependencies, working with Vendor Management and service owners to assess resilience, contractual protections, testing evidence and remediation requirements.

• Coordinate the identification, review and governance of important business services, impact tolerances, service maps, dependencies and vulnerabilities.

• Support business service owners in understanding their resilience responsibilities and maintaining appropriate evidence for their services.

• Own the operational resilience scenario testing programme, including the design, planning, facilitation and evaluation of severe-but-plausible exercises linked to the Bank’s important business services and impact tolerances.

• Track operational resilience vulnerabilities, lessons learned and remediation actions through to closure, ensuring insights from incidents, operational risk activities and resilience testing are appropriately reflected in resilience improvements, and escalating overdue or material issues where required.

• Coordinate the Bank’s contribution to Group digital operational resilience requirements and support the alignment of UK operational resilience activities with relevant Group DORA obligations.

• Produce high-quality operational resilience reporting, management information and self-assessment material for senior management, Executive Committees and Board-level governance forums.

• Support internal audit, regulatory engagement and assurance activity relating to operational resilience, ICT resilience and third-party dependencies.

Who We Are Looking For:

• Extensive experience in operational resilience, technology risk, operational risk, business continuity, resilience assurance, or a related risk and governance discipline within banking or regulated financial services. 

• Strong practical knowledge of the UK FCA/PRA operational resilience regime, including Important Business Services, impact tolerances, service mapping, scenario testing, vulnerability management and self-assessment. 

• Practical experience developing, maintaining or operating operational resilience frameworks and governance, with the ability to translate regulatory expectations into proportionate processes, guidance and evidence requirements. 

• Strong experience designing, facilitating and evaluating severe-but-plausible resilience scenarios, including tabletop and cross-business exercises, and driving lessons learned, remediation and retesting through to completion. 

• Good understanding of the interfaces between operational resilience and technology/ICT resilience, third-party and supplier resilience, business continuity, incident management and operational risk, with experience working across these disciplines in practice.

• Working knowledge of DORA and digital operational resilience requirements, particularly in relation to ICT risk, resilience testing, ICT third-party dependencies and incident management. 

• Experience identifying and assessing dependencies and vulnerabilities across business services, technology, third parties and intra-group arrangements, and translating these into practical resilience improvements. 

• Strong analytical, reporting and written communication skills, including experience producing risk and resilience reporting, maintaining control evidence, tracking vulnerabilities and remediation actions through to closure, and preparing materials for Executive and Board-level audiences.

• Excellent stakeholder management and influencing skills, with the ability to build credibility, gain buy-in and coordinate delivery across business, technology, risk and third-party management functions without direct authority.

Desirable Qualifications and Framework Knowledge:

• CBCI, MBCI, CRISC, CISM, ISO 22301, ISO 27001, COBIT or equivalent practical experience.

• Experience supporting internal audit, regulatory reviews or operational resilience assurance activity.

• Experience operating within FCA, PRA, DORA or similar regulatory frameworks.