Operational Resilience Risk Manager

Role Purpose

The Operational Resilience Risk Manager will support the Group Head of Resilience Risk in establishing, embedding, and maintaining a robust Group-wide resilience risk framework. The role covers operational resilience, business continuity, and incident and crisis management across all entities within the Group.

The role provides second-line oversight and challenge to ensure that the Group can prevent, adapt to, respond to, recover, and learn from disruption, maintaining continuity of services critical to customers, markets, and regulators.

The role holder will also be expected to support ad hoc work as directed by the Head of Resilience Risk and the Group Head of ERM.

The successful candidate will have a good understanding of operational resilience and resilience risk, governance, and assurance practices, knowledge of regulatory expectations, good communication skills, and sound commercial judgement. They will be collaborative and engaging, have integrity, and be resilient.

• Support the development, implementation, and ongoing refinement of the Group’s resilience risk policy and framework, ensuring alignment to PRA, FCA and GFSC expectations, industry best practice, and the proportional needs of each entity.
• Contribute to baseline assessments of existing capabilities, identifying gaps and improvement opportunities, and support control testing, policy attestation, and production of training and guidance materials.
• Design, implement, and maintain the Group-wide incident and crisis management approach, supporting tabletop exercises, simulations, and periodic reviews to ensure continual improvement and lessons‑learned integration.
• Provide independent second‑line oversight and challenge across operational resilience, business continuity, and crisis response, including risk assessments, deep dives, thematic reviews, and assurance over entity‑level frameworks and testing.
• Support Group‑level crisis and incident management work streams, ensuring the Group’s response strategy is embedded and that mechanisms are in place for effective disruption response and recovery.
• Monitor and support entities in meeting regulatory compliance milestones, including GFSC and FCA operational resilience requirements.
• Produce clear and timely risk reporting for senior stakeholders, including dashboards, trend analysis, and periodic regulatory submissions, while staying abreast of regulatory developments and industry trends.
• Facilitate and coordinate business‑led resilience work streams to support consistent practice and aggregated reporting across the Group.
• Build strong relationships across the Group, representing Risk in relevant committees and working groups, and support education and awareness sessions for business areas.
• Promote a culture of preparedness and adaptability, encouraging proactive, customer‑centric resilience planning and decision‑making.

• Strong knowledge of operational resilience principles and associated regulatory requirements (PRA, FCA, GFSC).
• Experience working in a second‑line non‑financial risk environment within regulated financial services.
• Commercial awareness with the ability to balance regulatory, operational, customer, and strategic considerations.
• Collaborative and engaging, able to build trust and work effectively across teams.
• Strong communication, stakeholder management, and analytical skills, with the ability to distil complex issues into clear insights.
• Strategic yet pragmatic, solution‑focused, and committed to continuous improvement.
• Sound judgement, attention to detail, and an understanding of the organisation’s business lines and risk landscape.
• Constructively challenging while maintaining a partnership mindset.
• Demonstrates integrity, resilience, and strong professional judgement.
• Experience in insurance, lending, or broader financial services (advantageous).
• Professional risk qualifications (e.g., IRM) or equivalent experience (advantageous).
• Knowledge of cyber resilience or technology risk (advantageous).

Please note - we may close this vacancy early if we receive lots of applications or business priorities change.

Admiral:
Where You Can

We…