Business Resilience Manager

Select how often (in days) to receive an alert:

Location: Leeds, GB Manchester, GB London, GB

Company: Eversheds Sutherland

We are Eversheds Sutherland, a global law firm, with more than 5,000 people across over 30 countries. We’re full-service with deep niche and sector experience. Whatever challenge, wherever in the world, we’re equipped and ready to meet it. We live our values, we’re purposeful and purpose-led. So although the world is fast-moving and rapidly changing, we see it as a place where everyone can thrive.

We’re ambitious for our clients, our communities – and for you. Whether you’re starting out on your career or well established, whether you’re a lawyer or in business services. If you’re looking for what’s next, we are too.

The General Counsel’s Office supports Eversheds Sutherland’s international business by providing trusted leadership across legal, regulatory, risk and governance matters. The Business Resilience function works across practice groups, Business Services teams and international offices to strengthen preparedness, protect critical services and enable an effective response to disruption. This role reports to the Head of Risk Management and partners closely with IT, Information Security and senior business leaders.

We are seeking an experienced and influential Business Resilience manager to lead the continuous improvement of Eversheds Sutherland’s business resilience management capability across its international network.

Reporting to the Head of Risk Management, you will ensure that business resilience arrangements remain practical, current and aligned to the firm’s most critical services, client commitments, enterprise risks and Minimum Viable Firm priorities. You will maintain the controlled documentation required for relevant ICO certification and lead the associated audit.

You will translate policy, business impact analysis and recovery priorities into a clear improvement programme for plans, runbooks, recovery strategies and supporting information. Working directly with senior leaders, you will challenge assumptions, clarify accountabilities and ensure arrangements reflect changes in services, people, locations, technology, suppliers and the external threat environment.

A central feature of the role is close partnership with IT as technology incident response, cyber response and disaster recovery capabilities mature. You will align business and technology recovery assumptions, design a structured operational and executive exercising programme, and convert lessons from exercises and live incidents into measurable improvements and clear management information.

You will:

• Business Resilience leadership and governance: lead and continually improve the firm’s business resilience management programme, standards, governance, lifecycle and delivery roadmap.
• Translate enterprise risk priorities, Minimum Viable Firm requirements, likely crisis triggers and client commitments into a clear, risk-based resilience improvement plan.
• Develop and maintain clear roles, decision rights and escalation arrangements across the Gold, Silver and Bronze incident command structure, promoting effective ownership across practice groups, Business Services teams, international offices and critical support functions.
• Establishing and chairing a cross-firm Business Resilience governance forum.
• Plan maturity and continuous improvement: establish a proportionate review cycle for business impact assessments, business resilience plans, runbooks, contact information and critical business information.
• Engage senior leaders to validate critical activities, recovery priorities, recovery time objectives, resources, dependencies and workable recovery…