Head of Enterprise Resilience - Information Security & Risk

Head of Enterprise Resilience
- Security & Risk
- Hybrid
- London
- Permanent

I am working with a leading Insurance client who are seeking an experienced Head of Enterprise Resilience to lead and mature its resilience strategy across operational continuity, cyber risk, information security, supplier oversight, and crisis management.

This is a senior leadership opportunity for an individual who can balance strategic vision with practical execution, ensuring the organisation can anticipate, withstand, respond to, and recover from operational disruptions that face organisations in a complex risk environment.

You will form key relationships with executive stakeholders, driving resilience initiatives across the business, ensuring strong governance frameworks, and overall embedding a proactive risk culture.

• Develop and enhance the enterprise resilience framework across the organisation.
• Lead business continuity, crisis management, and recovery planning activities.
• Conduct resilience assessments, scenario testing, and simulation exercises.
• Identify operational vulnerabilities and drive mitigation strategies.
• Establish meaningful resilience metrics, reporting, and governance processes.

• Provide leadership across cyber risk and information security programmes.
• Oversee security governance, policies, and risk management frameworks.
• Support the assessment and management of emerging cyber threats.
• Drive security awareness initiatives across the wider business.
• Ensure effective oversight of security incidents, control environments, and regulatory obligations.

• Develop a robust supplier governance and outsourcing framework.
• Ensure appropriate due diligence and ongoing oversight of critical suppliers.
• Monitor supplier performance, risk exposure, and service quality.
• Strengthen third-party risk management practices across the organisation.

Lead, mentor, and develop a specialist resilience and risk team.

• Build strong relationships with senior business leaders and key stakeholders.
• Present insights, recommendations, and risk reporting at executive and board level.
• Champion a culture where resilience, security, and risk management are embedded into business decision-making.

• Significant experience leading enterprise resilience, operational resilience, cyber risk, or information security functions.
• A strong understanding of governance, risk management, and regulatory environments.
• Experience operating within a complex, highly regulated organisation.
• A proven track record of influencing senior executives and board-level stakeholders.
• Strong leadership skills with the ability to develop high-performing teams.
• stakeholder management, and strategic planning capabilities.
• Experience with in financial services - ideally Insurance.
• Certifications - CISM, CISSP, CRISC, CBCI, MBCI, or equivalent.

We process personal data submitted as part of your application for recruitment purposes in line with UK GDPR. All applications are reviewed by a member of our team, we do not use automated decision-making in our selection process.
Your application will be assessed against the requirements of this role.

By applying to this advert, you consent to receiving future relevant roles and industry news and insights from us. To opt out of this, please contact:

For more information on how we use your data, including how long we retain it & your rights, please refer to our Privacy Policy: