Cyber Business Analyst : Business Resilience : Energy Trading

This is an exciting opportunity for a Business Resilience Business Analyst to join a world-leading Energy Trading & Commodities company as part of their Cyber Resilience Programme.

Location:

London, Waterloo (Hybrid – minimum 3 days per week in office).

Start Date:

ASAP.

The Business Resilience Business Analyst is responsible for supporting the transition of the Cyber Resilience Programme from project delivery into sustainable Business‑As‑Usual (BAU) operations across Trading & Supply. The role acts as the central custodian for resilience artefacts, playbooks, manual workarounds, testing schedules, resilience documentation and governance, ensuring that outputs delivered through the programme are ope rationalised, maintained and continuously improved within the broader T&S Business Resilience Framework.

Working across all Lines of Business, Functions, IDT teams and the CRISP programme, the role ensures that resilience capabilities developed during the programme can be effectively run, maintained, tested and governed beyond programme closure.

• Support the incorporation of Cyber Resilience Programme outputs into the wider T&S Business Resilience Framework.
• Define and establish sustainable ownership models for resilience artefacts and capabilities.
• Ensure programme deliverables are transitioned into BAU governance, processes and operating models.
• Support the development of enduring resilience standards, processes and controls.
• Maintain alignment between CRP outputs, CRISP requirements and existing Business Resilience frameworks.

• Lead the development of the long‑term Run & Maintain approach for cyber resilience capabilities across T&S.
• Establish governance, review cycles and ownership models for resilience artefacts.
• Define ongoing maintenance requirements for:
  • Cyber Playbooks
  • MVC Documentation
  • Manual Workarounds
  • Critical Role Lists
  • Recovery Documentation
  • Testing and Exercising Plans
• Ensure resilience documentation remains current, tested and fit for purpose.
• Work with business owners to embed accountability for ongoing maintenance activities.

• Serve as the central focal point for management, review, publication and communication of Cyber Playbooks across T&S.
• Maintain version control, approval workflows and document repositories.
• Coordinate regular reviews and updates.
• Ensure consistency of resilience documentation across all LOBs.
• Monitor compliance with agreed review and approval cycles.

• Own and maintain the Cyber Resilience Testing and Exercising Schedule.
• Coordinate exercises across T&S business units and functions.
• Track findings, recommendations and remediation actions.
• Ensure testing activities are aligned with Business Resilience Framework requirements.
• Support readiness assessments and maturity reporting.

• Manage workflows associated with maintaining Minimum Viable Company (MVC) documentation.
• Coordinate annual reviews and updates of manual workaround procedures.
• Monitor documentation completeness, quality and ownership.
• Support businesses in maintaining resilience artefacts as part of BAU operations.
• Track outstanding actions required to maintain resilience readiness.

• Analyse resilience processes and identify improvement opportunities.
• Support development of resilience metrics, KPIs and reporting.
• Facilitate workshops and stakeholder engagement sessions.
• Gather and document resilience requirements arising from business, regulatory or programme changes.
• Support continuous improvement of resilience capabilities and governance processes.

Work closely with:

• Programme Manager
• Cyber Resilience Lead
• Business Resilience Manager
• Business Resilience SMEs
• Change & Engage Lead
• LOB Focals
• IDT Teams

• 5+ years Business Analyst or Business Resilience experience.
• Experience in Business Continuity, Operational Resilience, Disaster Recovery or Cyber Resilience programmes.
• Experience transitioning project deliverables into BAU operating models.
• Strong governance and documentation management capabilities.
• Experience facilitating workshops with senior business stakeholders.
• Strong analytical, communication and stakeholder management skills.
• Proficient in Microsoft 365 collaboration and reporting tools.

• Experience with in Energy Trading, Commodities or Financial Services environments.
• Knowledge of Business Continuity Management, Operational Resilience or Cyber Recovery frameworks.
• Experience coordinating resilience exercises and testing programmes.
• Familiarity with CRISP, MVC or cyber incident response planning.