Business Continuity Manager

Business Continuity Manager / ISO 22301 audit and full lifecycle implementation.

Location: London / Portsmouth (hybrid)

Type: Permanent, Full-time

The role You will be responsible for designing, implementing, and continuously improving the Business Continuity Management System (BCMS) in line with ISO 22301 and industry best practice. Working across the organisation, you will maintain BC policies and procedures, ensure clear governance and accountability, and lead Business Impact Analyses for critical systems and services. You will assess recovery priorities, define RTOs and RPOs, and ensure everything aligns with the organisation's risk appetite — while staying ahead of emerging threats, including those arising from AI‑enabled systems and third‑party dependencies.

A significant part of the role involves testing and exercising. You will design and deliver a structured testing framework, develop scenario‑based exercises ranging from cyber incidents and data breaches to physical simulations such as fire evacuations and flood response, and deliver Exercise‑in‑a‑Box (EiaB) programmes for IT teams and business units. Post‑exercise debrief and improvement tracking will be central to how you close the loop and build genuine resilience.

• Formal ISO 22301 certification is a firm requirement — either as a Lead Implementer or Lead Auditor. You must have a thorough, working knowledge of the standard, including having independently led a full implementation lifecycle. Given the various testing phases involved, this level of experience typically represents at least a year of dedicated hands‑on work, and must have been led by the individual rather than as part of a broader team.
• The ability to independently conduct Business Impact Analyses is critical, particularly across IT and infrastructure functions. The candidate must bring genuine expertise here — this is not a role where on‑the‑job learning in this area is acceptable.
• Solid experience in continuity testing is required, with the ability to build and own a testing framework from the ground up. The candidate must have a track record of leading both the planning and execution of testing activities in their own right, rather than playing a supporting role within a team.

On the client side, you will oversee business continuity and disaster recovery readiness across managed client environments, working closely with service delivery teams to ensure recovery solutions are defined, tested, and compliant with SLAs and contractual obligations. You will also support client audits and due diligence activity as needed.

• Demonstrable experience in a Business Continuity, Resilience, or BCDR management role, ideally within a managed services or technology services environment
• Strong working knowledge of ISO 22301 and practical experience implementing or maintaining a certified BCMS
• Hands‑on experience conducting Business Impact Analyses, defining RTOs and RPOs, and translating findings into actionable recovery strategies
• Proven ability to design, deliver, and evaluate continuity exercises — including scenario‑based simulations and Exercise‑in‑a‑Box programmes
• Experience conducting system‑level BC audits and driving remediation across technical and business teams
• Confidence operating at a senior level, presenting to leadership and communicating complex risk and resilience topics clearly
• Familiarity with related disciplines including cybersecurity, data protection (DPIA), and AI governance is advantageous

This is a business‑critical role with genuine breadth. You will have the autonomy to shape strategy, influence culture, and make a visible difference to how a large, growing MSP manages risk and resilience. The organisation takes continuity seriously, and you will have the mandate and the support to build something that lasts.

You will work alongside experienced teams in Assurance, Service Delivery, and IT, with exposure to a diverse and complex client portfolio. Hybrid working is available across the London and Portsmouth offices.

If you have the experience and drive to take ownership of business continuity at scale, we would love to hear from you. Please apply with your CV and a brief covering note outlining your most relevant experience.