Cyber Recovery Lead

Join us in Technology Operations rooted in our Global Technology Command Centre. Our goal is to ensure service stability, providing consistent rapid response to issues impacting our Customers and Clients.

As a Cyber Recovery Lead, you will be a highly experienced Technologist with a deep understanding of the current Cyber threat landscape. You will be joining a focused team to drive real world processes and tools to recover technologies underpinning our Businesses in the event of a Cyber incident impacting our Services. You will work closely with cross-functional teams to design, develop, and optimize technical and operational processes and ensure our testing is in line with the Banks directions and provides real world recovery practice.

With excellent leadership and influencing skills, you will be leading technology recovery work streams that would function during major cyber incidents, working closely with Incident Management, Technology teams, Cyber Operations, and senior technology stakeholders.

To be successful as a Cyber Recovery Lead, you should have:

• Experience in leading Technology Recovery during major Cyber incident and crisis.
• Extensive experience of cyber recovery principles, best practices, testing, tools and processes.
• Exceptional communication and coordination skills. Ability to manage senior stakeholder demands and operate effectively under pressure in a dynamic environment.

Some other highly valued skills include:

• Experience with recovery tools and technologies such as Rubrik.
• Knowledge of global cyber recovery regulations and standards.
• Proven experience supporting major cyber incident recovery, including ransomware.

You may be assessed on key critical skills relevant for success in role, such as risk and controls, communication skills and interaction with a diverse range of stakeholders, as well as job-specific technical skills.

This role is based out of our Knutsford office.

To develop, implement, and maintain an effective resilience strategy and Operational Recovery Planning and Incident Management framework aligned to industry leading standards and controls and regulatory expectations, to enable the bank to respond and recover important business services to severe but plausible scenarios, and minimise the impact to customers, clients, colleagues and the wider market.

• Socialisation and implementation of the resilience strategy and underpinning framework across the firm (e.g. SMRs and delegates, business / function resilience role owners and all colleagues), ensuring complaince to the standard and controls.
• Development and enhancement of the resilience, crisis and incident management framework to uplift recovery and response capabilities to ensure Important Business Services can continue to operate during disruption events to minimise the impact on customers, clients and the market.
• Operational Recovery Planning and Security Incident Management planning standards and controls enhancement according to industry practice, emerging threats and regulatory requirements.
• Provide oversight to the business and technology recovery capability improvements, and uplifts to third-party (suppliers and Financial Market Infrastructure) recovery capabilities to enable Important Business Services to remain within or mitigate impact tolerance thresholds.
• Communication of the firm’s / business’ resilience position (risks and remediation) through clear and transparent scorecards / dashboards to enable effective investment decisions to the Board and Executive Committees, Control Forums and business stakeholders.
• Enhancement of resilience, crisis management and incident response and recovery capability through sophisticated, regular and adequate testing coverage to demonstrate Important Business Services’ ability to recover within impact tolerance for a severe but plausible scenario.
• Assurance that services and products are built resiliently by the business through the change management process (NAPAs, DRAs, material change process).
• Continually remain abreast of resilience and crisis and incident management developments, regulatory policy requirements and the emerging…