Principal Consultant Senior Manager) Operational Resilience

Principal Consultant (Senior Manager) – Operational Resilience & Cyber Risk

Location: Edinburgh or Glasgow (Hybrid) |
Practice Area: Finance, Risk, Regulatory & Financial Crime |
Type: Permanent

Build resilience where it matters most across cyber, technology, and third-party risk

Capco is seeking experienced Principal Consultants in Operational Resilience and Cyber Risk to join our growing Finance, Risk, Regulatory & Financial Crime (FRRF) capability. In this senior role, you'll lead complex client engagements across financial services and energy, advising on regulatory expectations such as PRA and DORA while driving the design and implementation of robust resilience frameworks. You'll play a key role in shaping client strategy, leading transformation programmes, and contributing to capability growth.

You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, accelerate insight generation, and improve delivery while applying responsible AI practices and appropriate human oversight.

• Lead operational resilience assessments, scenario testing, and control implementation programmes, identifying opportunities to leverage AI-enabled workflows and automation to strengthen resilience outcomes.
• Advise clients on regulatory readiness across PRA, DORA, and other resilience frameworks, translating regulatory expectations into practical transformation strategies and sustainable operating models.
• Oversee cyber risk, third-party risk, and vendor resilience assessments, using AI-enabled analytics where appropriate to strengthen risk identification, prioritisation, and decision-making.
• Design and implement governance models, dashboards, Important Business Services (IBS), Impact Tolerance (ITOL), and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised.
• Lead cyber and technology resilience transformation initiatives, including tooling, cloud security, and control enhancements, while contributing to business development, proposition development, and capability growth.

• Extensive experience delivering operational resilience, cyber risk, and third-party risk transformation within financial services, energy, or management consulting.
• Strong understanding of regulatory frameworks including PRA, DORA, and related operational resilience standards.
• Proven experience leading complex transformation programmes, including scenario testing, IBS/ITOL calibration, control remediation, and operating model transformation.
• Experience using approved AI tools, automation, or advanced analytics to enhance resilience, risk management, and programme delivery while maintaining appropriate governance and professional judgement.
• Excellent communication, leadership, and stakeholder management skills with the ability to influence senior stakeholders across business and technology functions.

• Experience leading enterprise-wide operational resilience or cyber transformation programmes.
• Background in cloud security, cyber tooling implementation, cyber security architecture, or AI-enabled cyber analytics.
• Experience with vendor risk management, third-party governance, supply chain resilience, and remediation strategies.
• Proven track record of mentoring, coaching, and developing high-performing consulting teams.
• Experience contributing to business development, proposition development, and strategic client growth.

• Deliver high-impact transformation programmes for Tier 1 financial institutions.
• Work in a collaborative, flat, and entrepreneurial consulting culture.
• Access continuous learning, industry certifications, and structured leadership development.
• Help shape the future of cyber and operational resilience through innovation, automation, and technology.
• Be part of a team delivering meaningful change across financial services and energy.

• Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
• Mental Health: Easy access to Care First, Unmind, Aviva consultations, and in-house first aiders.
• Family-Friendly: Maternity, adoption, shared…