Resilience Risk Senior Manager

Role Purpose

The Resilience Risk Senior Manager is responsible for establishing, embedding, and maintaining a robust Group‑wide resilience risk framework encompassing operational resilience, business continuity, incident and crisis management, and third-party and supply chain resilience.

The role provides independent second‑line oversight and challenge to ensure that the Group can prevent, adapt to, respond to, recover, and learn from disruption, maintaining continuity of services that are critical to customers, markets, and regulators.

Working collaboratively with the Group Technology and Information Security Risk, Operational Risk, Change and Transformation Risk, and Actuarial and Financial Risk, as well as resilience risk professionals across the Group, the role will drive a consistent and integrated approach to resilience risk management across all entities, protecting and enhancing outcomes for current and future customers.

The role holder will also be expected to support ad hoc work as directed by the Group Head of ERM and Group Chief Risk and Compliance Officer (CRCO).

The successful candidate will have a deep understanding of resilience risk, governance, and assurance practices, a strong knowledge of regulatory expectations, excellent communication skills, and sound commercial judgement. They will be collaborative and engaging, have integrity, and be resilient.

• Develop, implement, and maintain a Group‑wide resilience risk framework covering operational resilience, business continuity, incident/crisis management, and third‑party resilience.
• Ensure the framework aligns with regulatory expectations (PRA, FCA, GFSC), defines clear governance and roles, embeds customer outcome considerations, and supports proportional adoption across entities.
• Conduct baseline assessments, identify gaps, set uplift priorities, and deliver training and guidance to strengthen resilience capabilities.
• Lead the design, implementation, and maintenance of Group incident and crisis management approaches, including roles, processes, simulations, and lessons learned integration.
• Provide independent oversight, challenge, and assurance of resilience activities, including service mapping, scenario testing, response planning, and third‑party resilience.
• Perform risk assessments, thematic reviews, and deep dives to identify vulnerabilities and recommend improvements.
• Work with Technology and Information Security Risk to ensure aligned oversight of cyber and technology recovery capabilities.
• Support Group and entity readiness for regulatory milestones and evolving resilience standards.
• Produce clear, timely reporting and insights for senior committees and executives, escalating emerging risks or deficiencies where required.
• Maintain awareness of regulatory developments, trends, and best practice to ensure the framework remains fit for purpose.
• Build and lead a high‑performing Group Resilience Risk team and contribute to a high‑performance culture across ERM.
• Partner with stakeholders to embed resilience risk in strategic and transformation initiatives and promote a customer‑centric, proactive risk culture.
• Champion preparedness, adaptability, continuous improvement, and strong risk culture across the Group.

• Strong expertise in operational resilience, business continuity, crisis management, and third‑party risk management within regulated financial services.
• In‑depth knowledge of PRA, FCA, and GFSC resilience regulations and related guidance.
• Proven experience designing and embedding resilience or risk frameworks across multiple entities or jurisdictions.
• Demonstrated experience providing independent oversight, challenge, and assurance activities, including thematic reviews.
• Strong stakeholder management and influencing skills with credibility at senior/executive levels.
• Ability to interpret complex information and produce clear, insight‑driven risk reporting.
• Sound judgement balancing regulatory, customer, operational, and commercial considerations.
• Experience in insurance, lending or wider financial services (advantageous).
• Professional risk qualifications (e.g., IRM) and knowledge of…