Senior Operational Resilience Engineer

Job Description

Summary: Cboe Europe is seeking an experienced Senior Operational Resilience Engineer to support compliance with UK and EU operational resilience requirements and to take first-line ownership of how new and changing regulatory requirements are assessed, planned for, and embedded across the business, as part of a global Operational Resilience Engineering Team. Applying resilience and regulatory-implementation expertise, you will help strengthen our ability to prevent, respond to, and recover from disruptive events, particularly those involving technology and cyber security.

Working with technology, operations, risk, legal, compliance, and audit teams, you will document and enhance the resilience of trading services used by hundreds of financial services firms across the UK and EU. The role takes an AI-first approach, automating evidence gathering, mapping updates, monitoring, and reporting.

Location: London, UK

• Business services and their impact tolerances.
• Supporting functions and their criticality.
• Processes, sub-processes, assets, and controls that support these services and functions.
• Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for the above.
• Developing automated triage, enrichment, event correlation, and post-incident documentation capabilities.

• Helping functions complete business impact assessments and clearly define technology and operational risks.
• Helping functions document business continuity plans aligned with RTOs, RPOs, and our operational resilience strategy.
• Identifying vulnerabilities, single points of failure, and interdependencies within business services.
• Designing and delivering resilience testing, including severe but plausible desktop scenario exercises.
• Documenting test results and implementing recommendations for improvement.
• Designing, building, and maintaining automated solutions for BC/DR evidence collection, incident management, and change management, ensuring outputs are examination-ready and meet regulatory requirements.

• Leading assessment, business impact analysis, and implementation planning for new and incoming regulatory requirements (e.g. MiFID II/MiFIR, DORA, and EMIR), and translating them into operational processes, technology changes, and first-line business controls.
• Coordinating cross-functional implementation with Technology, Operations, Legal, and Product, embedding control testing as it matures, and acting as the first line's interface with second-line Compliance.

• Preparing regulatory self-assessments for operational resilience and DORA.
• Maintaining a regulatory change and implementation register and reporting status to senior management, the Regulatory Decisions Committee (RDC), and internal and external audit.
• Preparing regular reports for senior management and board committees.
• Maintaining operational resilience management information.
• Supporting the analysis of test results and tracking and reporting remediation actions.
• Acting as a key risk partner to the Operations function.

• At least five years’ experience in technology risk management, business continuity, or operational resilience.
• Ability to quickly learn our business services and systems, supported by a strong interest in technology.
• Hands-on experience using AI-driven automation for BC/DR evidence collection, test execution, and recovery workflows.
• Excellent written and verbal communication skills.
• Strong stakeholder management skills, with the ability to influence effectively across a three-lines-of-defence control framework.
• Experience using data analysis and reporting tools.

• Knowledge of PRA Policy Statement 21/3 on Building Operational Resilience, the Digital Operational Resilience Act (DORA), and European market structure regulation such as MiFID II/MiFIR…